After you deploy a Cloud NGFW resource, you configure how it handles the traffic that flows through your endpoints. You can perform this configuration in the Cloud NGFW console, the dedicated tenant console that you access after you subscribe to the service through the AWS Marketplace.

Because a Cloud NGFW is a fully managed service, you don't configure interfaces, routing tables, or NAT devices on the firewall itself. Instead, you set the behavior for each endpoint or resource, and Cloud NGFW applies it for you.