All checks
Medium
Network Firewall firewalls should have subnet change protection enabled
Confirms that AWS Network Firewall firewalls have subnet change protection enabled.
- service
- NetworkFirewall
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable subnet change protection for the Network Firewall.
- Navigate to the VPC console
- Select the Network Firewall
- Modify the firewall to enable 'Subnet change protection'
- Apply the changes
See which of your accounts this check is failing on.
Book a demo