Quick Start Security for AWS Network Firewall
Thank you!
We got your information.
Coralogix Extension For AWS Network Firewall Includes:
Dashboards - 2
Gain instantaneous visualization of all your AWS Network Firewall data.
Alerts - 3
Stay on top of AWS Network Firewall key performance metrics. Keep everyone in the know with integration with Slack, PagerDuty and more.
High Severity Suricata Alert Detected
This alert triggers for all Network Firewall logs with high-severity Suricata alert events. Impact Depends on the type and parameters of the log. Please check the logs for more details. Mitigation To further investigate the alert, check fields like 'signature', 'category', 'src_ip', and 'dest_ip' in the log if these fields are present (can change per log). Also, check for any repeating alerts for the same machine/IP and adjacent logs.
Medium Severity Suricata Alert Detected
This alert triggers for all Network Firewall logs with medium-severity Suricata alert events. Impact Depends on the type and parameters of the log. Please check the logs for more details. Mitigation To further investigate the alert, check fields like 'signature', 'category', 'src_ip', and 'dest_ip' in the log if these fields are present (can change per log). Also, check for any repeating alerts for the same machine/IP and adjacent logs.
Low Severity Suricata Alert Detected
This alert triggers for all Network Firewall logs with low-severity Suricata alert events. Impact Depends on the type and parameters of the log. Please check the logs for more details. Mitigation To further investigate the alert, check fields like 'signature', 'category', 'src_ip', and 'dest_ip' in the log if these fields are present (can change per log). Also, check for any repeating alerts for the same machine/IP and adjacent logs.
Integration
Learn more about Coralogix's out-of-the-box integration with AWS Network Firewall in our documentation.
