AWS Network Firewall’s rule hit count capability gives security teams visibility into which stateful firewall rules are matching traffic, helping them identify unused or redundant rules and validate whether security controls are working as intended. The capability covers stateful rules in both custom and managed rule groups, while stateless rules are not supported. The feature is enabled by default and comes at no additional Network Firewall cost, although standard charges still apply for storing and … More →
This article has been indexed from Help Net Security
Read the original article: