Using Stateful Domain List rule in Network Firewall


I have tried to use Domain list Stateful rule for my Network Firewall but it's either passed everything when default actions is DROP ESTABLISHED or dropped everything when default action is DROP ALL.

I will appreciate any pointers to what could be the reason for the domain list rule not to be working.

1 Answer

Hi Oluwakemi,

If the Stateful Default Actions are taking effect, it could indicate that your Domain List Rules aren't matching as expected. Be sure that you're using explicit names or names that contain a wildcard ("") appropriately. Domain List rules support either Allow or Deny. Here is a resource with guidance regarding Domain List rule matching: Match Settings

Additionally, here is a blog post that steps through a hands-on process of configuring Network Firewall evaluations and Strict Rule Order (which appears to be in use in your usecase): Hands-On Walkthrough

profile pictureAWS
answered 4 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions