AWS network-firewall medium security documentation change
Summary
Added IP-in-IP protocol to list of unsupported Suricata features
Security assessment
Documenting lack of support for IP-in-IP protocol could indicate traffic using this protocol would bypass inspection, potentially creating a security blind spot
Diff
diff --git a/network-firewall/latest/developerguide/suricata-limitations-caveats.md b/network-firewall/latest/developerguide/suricata-limitations-caveats.md index ca7048c37..ebc34ea1e 100644 --- a//network-firewall/latest/developerguide/suricata-limitations-caveats.md +++ b//network-firewall/latest/developerguide/suricata-limitations-caveats.md @@ -34,0 +35,2 @@ The following Suricata features are not supported by Network Firewall: + * IP-in-IP protocol. +