FW Design for AWS Cloud

Fabz — Thu, 02 Nov 2023 14:42:26 GMT

Hi Checkmates,

Looking for the best practice design for AWS, found GWLBxCP on this Overview of CloudGuard Network for AWS Centralized Gateway Load Balancer

What is the best option between A Centralized GWLB Security VPC or A GWLB Security VPC for Transit Gateway (TGW), if the existing just has 3 VPCs that communicate with each other and NAT GW?

The goal is to minimize the downtime on the existing design and protect every communication. Or doyou guys have any other suggestion?

Thank you everyone!

Re: FW Design for AWS Cloud

Shay_Levin — Thu, 02 Nov 2023 15:56:08 GMT

Hi.

With Solution 1 – A Centralized GWLB Security VPC , you will not be able to inspect traffic between VPCs, only between assets that are in the same VPC or VPC and the Internet.

With Solution 2 - A GWLB Security VPC for Transit Gateway (TGW) , you will also be able to inspect traffic between VPCs.

Watch the videos here and here and you will get some ideas.

topic FW Design for AWS Cloud in Cloud Firewall

FW Design for AWS Cloud

Re: FW Design for AWS Cloud