AWS network-firewall documentation change
Summary
Added documentation for enhanced logging capabilities (pass rule alerts, JA4 fingerprinting) and updated Suricata version references
Security assessment
Documents new security monitoring features (JA4 fingerprinting, pass rule alerts) but doesn't indicate fixes for existing vulnerabilities.
Diff
diff --git a/network-firewall/latest/developerguide/document-history.md b/network-firewall/latest/developerguide/document-history.md index 6b8c0ed7f..07522db1d 100644 --- a/network-firewall/latest/developerguide/document-history.md +++ b/network-firewall/latest/developerguide/document-history.md @@ -7 +7,3 @@ -The following table describes important changes to this documentation. +This page lists significant changes to this documentation. + +Service features are sometimes rolled out incrementally to the AWS Regions where a service is available. We update this documentation for the first release only. We don't provide information about Region availability or announce subsequent Region rollouts. For information about Region availability of service features and to subscribe to notifications about updates, see [What's New with AWS?](https://aws.amazon.com/new). @@ -10,0 +13 @@ Change| Description| Date +[Enhanced logging and firewall rule capabilities](./stateful-rule-groups-ips.html)| Network Firewall now supports additional Suricata features. You can now generate alerts on traffic that matches pass action rules and use JA4 fingerprinting in firewall rules. For more Suricata-specific information, see the [Suricata documentation](https://docs.suricata.io/en/suricata-7.0.8/). | March 27, 2025 @@ -16 +19 @@ Change| Description| Date -[Updated supported Suricata version to 7.0.](./stateful-rule-groups-ips.html)| AWS Network Firewall supports Suricata version 7.0. This might require changes in your use of Network Firewall. For information about the update to this version, see [Upgrading 6.0 to 7.0](https://docs.suricata.io/en/latest/upgrade.html#upgrading-6-0-to-7-0) and the [Suricata User Guide](https://docs.suricata.io/en/suricata-7.0.0/index.html). | November 24, 2024 +[Updated supported Suricata version to 7.0.](./stateful-rule-groups-ips.html)| This might require changes in your use of Network Firewall. For information about the update to this version, see [Upgrading 6.0 to 7.0](https://docs.suricata.io/en/latest/upgrade.html#upgrading-6-0-to-7-0) and the [Suricata User Guide](https://docs.suricata.io/en/suricata-7.0.8/index.html). | November 24, 2024