AWS Network Firewall Now Displays Count of Triggered Security Rules

Cybersecuritynews •Abinaya • August 24, 2026

AWS has introduced rule hit count support for AWS Network Firewall, giving security teams direct visibility into which stateful firewall rules are matching live network traffic. The new capability is enabled by default and helps organizations identify active, inactive, and potentially misconfigured rules without manually reviewing large volumes of firewall logs. As firewall policies grow, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AWS Enhances Network Firewall with Rule Hit Count Feature AWS has launched a new capability for its Network Firewall that allows security teams to see which stateful firewall rules are actively matching traffic. This feature, enabled by default, helps organizations identify unused or misconfigured rules without the need for extensive log reviews. The capability applies to both custom and managed rule groups, but does not support stateless rules. The introduction of this feature aims to improve the efficiency of firewall management and enhance security posture by ensuring that security controls are functioning as intended. This update comes at no additional cost for the Network Firewall service, although standard charges for storage still apply. 2 sources 25

Extracted Entities

Companies (1)

AWS