AWS network-firewall documentation change
Summary
Added detailed information about traffic analysis metrics collection and reporting
Security assessment
The changes provide more details about traffic analysis reporting but do not address security vulnerabilities or add security features.
Diff
diff --git a/network-firewall/latest/developerguide/reporting.md index c7cccb34a..83deae0c5 100644 --- a/network-firewall/latest/developerguide/reporting.md +++ b/network-firewall/latest/developerguide/reporting.md @@ -9 +9,7 @@ Generating reports in Network FirewallCreating stateful rule groups from reports -AWS Network Firewall lets you generate reports on HTTP or HTTPS traffic observed over the last 30 days in any firewall. Before you can generate these reports, you must enable **Traffic analysis mode** when you create or update a firewall. For more information on firewall configuration, see [Managing your firewall in AWS Network Firewall](./firewall-managing.html). +AWS Network Firewall lets you generate reports on HTTP or HTTPS traffic observed over the last 30 days in any firewall, starting from the point in time when you enable **Traffic analysis mode** in a firewall. Network Firewall only starts collecting traffic analysis metrics when you enable **Traffic analysis mode** on your firewall. + +###### Tip + +If you enable **Traffic analysis mode** , then immediately generate a report, the report will only contain metrics from when you enabled that setting. For the most comprehensive analysis, we recommend you wait 30 days after you enable **Traffic analysis mode** before you generate a report. + +Before you can generate a traffic analysis report, you must enable **Traffic analysis mode** when you create or update a firewall. For more information on firewall configuration, see [Managing your firewall in AWS Network Firewall](./firewall-managing.html). @@ -32 +38,5 @@ When you generate a report, you create a snapshot into the last 30 days of netwo -###### Note +###### Before you generate a report + +If you haven't enabled **Traffic analysis mode** on your firewall, do that now. For more information, see [Managing your firewall in AWS Network Firewall](./firewall-managing.html). + +###### Important @@ -34 +44 @@ When you generate a report, you create a snapshot into the last 30 days of netwo -Before you generate a report, you must enable **Traffic analysis mode** on your firewall. For more information, see [Managing your firewall in AWS Network Firewall](./firewall-managing.html). +Network Firewall only starts collecting traffic analysis metrics when you enable **Traffic analysis mode** on your firewall. Traffic observed before you enable **Traffic analysis mode** is not included in reporting.