IONOS Network Security Groups

Managed stateful firewall, IDS/IPS, and TLS inspection service deployed as VPC endpoints with Suricata-compatible rule syntax, AWS Managed Threat Signatures rule groups, and centralised deployment via AWS Firewall Manager across Organizations

Cloud-native, stateful firewall-as-a-service with built-in high availability, unrestricted scale, threat intelligence-based filtering, and centralised policy

Cloud firewall-as-a-service that filters and inspects network-layer traffic across Cloudflare's network for sites connected via Magic Transit or Cloudflare WAN. Formerly Magic Firewall; Enterprise only.

Fully managed next-generation firewall in an active/passive HA cluster, in a Stormshield edition (ANSSI-qualified) or Fortinet edition, operated 24/7 by Cloud Temple with changes via change management; billed monthly per HA cluster

Managed next-generation firewall for VPC networks with L7 inspection, IDPS threat signatures (Palo Alto-powered), TLS interception, hostname-based egress rules, and unified policy management across networks and organisations

Stateful network firewalls applied to cloud servers via labels, with reusable rule sets across server fleets

Managed next-generation firewall service powered by Palo Alto Networks VM-Series, with application awareness, TLS inspection, URL filtering, intrusion prevention (IPS), DNS security, and deployment flexibility across VCN or Transit Hub topologies