Create Endpoints for Managed AIRS for AWS

Table of Contents

Deploy Managed AIRS for AWS in Strata Cloud Manager

Create Endpoints for Managed AIRS for AWS

Create and view endpoints for Managed AIRS for AWS.

Where Can I Use This?	What Do I Need?
Managed AIRS for AWS	Access to Strata Cloud Manager (SCM)

After your Managed AIRS for AWS resource is successfully deployed, you must locate your endpoint service name, create the endpoints in AWS, and configure your routing to direct traffic to the firewall for inspection.

The subnets where you attach Managed AIRS endpoints must be in the virtual private cloud (VPC) you specified during its creation.

Locate the firewall endpoint service name in Strata Cloud Manager.
1. In the SCM console, select System SettingsDevice ManagementCloud NGFWs.
2. Click the Firewall ID or firewall name of your deployed Managed AIRS for AWS resource.
3. Select Endpoint Management from the left navigation pane.
4. Under Endpoints, copy the VPC Endpoint Service Name.
Create NGFW endpoints in your AWS VPC.
1. Log in to your AWS Management Console and select VPCEndpoints.
2. Click Create endpoint.
3. Under Service category, select Other endpoint services.
4. Paste the Service Name you copied from SCM and click Verify service.
5. Select the VPC and the Availability Zones/Subnets where you want the firewall endpoints to reside (your Trust or App subnets).
6. Select the Security Group that allows the necessary traffic to pass to the endpoint.
7. Click Create endpoint.
Update VPC route tables to redirect traffic to the Managed AIRS for AWS endpoint.
Modify your AWS VPC route tables (for example, your Internet Gateway ingress route table or private subnet route tables) to set the Managed AIRS for AWS endpoints as the next hop for traffic you want to inspect.
1. In the AWS Console, select VPCRoute Tables.
2. Select the route table for the subnets you want to protect, such as your Public Subnet or Private App Subnet.
3. Click Edit Routes.
4. Add or modify a route (for example, 0.0.0.0/0) and set the Target to VPCE Endpoint.
5. Select the Endpoint ID you created in the previous step.
6. Click Save changes.
  
  Traffic now flows from your VPC through the Managed AIRS for AWS resource for inspection.