AWS network-firewall documentation change
Summary
Updated description of TCP idle timeout behavior
Security assessment
The change clarifies TCP connection handling but does not indicate any security issue or vulnerability.
Diff
diff --git a/network-firewall/latest/developerguide/firewall-policy-settings.md index 6aa2fe91a..4420c82ae 100644 --- a/network-firewall/latest/developerguide/firewall-policy-settings.md +++ b/network-firewall/latest/developerguide/firewall-policy-settings.md @@ -45 +45 @@ The firewall policy `EXTERNAL_NET` setting is the negation of its `HOME_NET` set - * **TCP idle timeouts** (Optional) – Defines the number of seconds that can pass without any traffic sent through the firewall before the firewall determines that the TCP connection is idle. Existing TCP connections and flows are not impacted when you update this value. Only new connections after you update this value are impacted. + * **TCP idle timeouts** (Optional) – Defines the number of seconds that can pass without any traffic sent through the firewall before the firewall determines that the TCP connection is idle. When you update this value, existing connections will be treated according to your stream exception policy configuration.