Deep threat inspection for active threat defense managed rule groups - Amazon Network Firewall
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Deep threat inspection for active threat defense managed rule groups

Amazon Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, we will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers.

We will (or will engage a Technical Provider located in or outside of China to) use these threat indicators to improve the active threat defense managed rule groups and protect the security of customers and services.

Note

Customers can opt-out of deep threat inspection at any time through the Amazon Network Firewall console or API. When customers opt out, Amazon Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement.