All checks
Medium NetworkFirewall · regional

Network Firewall firewalls should have subnet change protection enabled

Confirms that AWS Network Firewall firewalls have subnet change protection enabled.

service
NetworkFirewall
severity
Medium
scope
evaluated in every region

How to fix it

Enable subnet change protection for the Network Firewall.

  1. Navigate to the VPC console
  2. Select the Network Firewall
  3. Modify the firewall to enable 'Subnet change protection'
  4. Apply the changes

See which of your accounts this check is failing on.

Book a demo