AWS Network Firewall incorporated two new managed rule groups: Zero-Day Threat Protection and Noisy Scanners and Tor Protection, developed by VisionHeight and accessible via AWS Marketplace. The zero-day protection aims to block malicious IP infrastructure before public blocklists detect them, offering proactive defense against threats targeting workloads.
The Tor Protection rule group minimizes firewall log noise by blocking communications from Tor exit nodes and known scanning sources, reducing security operations center alert overload and SIEM ingestion costs. These managed rules operate with daily updates to maintain current threat intelligence and extend AWS Network Firewall’s security offerings alongside other marketplace sellers.
Source & further reading
AWS Network Firewall now supports managed threat intelligence rules from VisionHeight ↗Source published 2026-06-25. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.