View a markdown version of this page

TLS inspection with a Next Generation policy in Amazon Network Firewall - Amazon Network Firewall
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

TLS inspection with a Next Generation policy in Amazon Network Firewall

You can use TLS inspection with a Next Generation policy. For information about Next Generation policies, see Next Generation policies.

A Next Generation policy supports session holding only

A Next Generation policy supports session holding only. This differs from a Classic Network Firewall policy, where session holding is optional and off by default. For information about session holding, see Using session holding with TLS inspection in Amazon Network Firewall.