NetworkFirewall.4

The default stateless action for Network Firewall policies should be drop or forward for full packets

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

AWS Network Firewall

AWS Foundational Best Practice, NIST.800-53.r5,

This control checks whether the default stateless action for full packets for a Network Firewall policy is drop or forward. The control passes if Drop or Forward is selected; and fails if Pass is selected.