Network security & firewalls · AWS vs Google Cloud
AWS Network Firewall vs Cloud NGFW Enterprise (intrusion prevention)
AWS Network Firewall maps to Cloud NGFW Enterprise, which adds intrusion prevention through zonal firewall endpoints that inspect traffic transparently.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | AWS Network Firewall | Cloud NGFW Enterprise (intrusion prevention) |
| Lifecycle | Generally available | Generally available |
| What it is | Managed, stateful network firewall and IPS for VPCs, with Suricata-compatible rules, domain filtering, TLS inspection, and AWS-managed threat signatures. | Layer 7 threat inspection through zonal firewall endpoints that intercept traffic transparently. |
| Pricing model | Per firewall endpoint-hour plus per GB processed (and advanced inspection for TLS). | Cloud NGFW Enterprise bills firewall endpoint hours plus data processed. |
| Docs | AWS Network Firewall docs | Cloud NGFW Enterprise (intrusion prevention) docs |
| Pricing page | AWS Network Firewall pricing | Cloud NGFW Enterprise (intrusion prevention) pricing |
Key differences
- Firewall endpoints are zonal and associated with VPC networks; no route changes are needed.
- Cloud NGFW Standard adds FQDN objects and threat intelligence without endpoints.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per firewall endpoint-hour plus per GB processed (and advanced inspection for TLS). AWS Network Firewall pricing →
- GCP
- Cloud NGFW Enterprise bills firewall endpoint hours plus data processed. Cloud NGFW Enterprise (intrusion prevention) pricing →
And on Azure?
Direct match Azure's equivalent is Azure Firewall. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of AWS Network Firewall?
AWS Network Firewall maps to Cloud NGFW Enterprise, which adds intrusion prevention through zonal firewall endpoints that inspect traffic transparently.
How does pricing compare between AWS Network Firewall and Cloud NGFW Enterprise (intrusion prevention)?
AWS: Per firewall endpoint-hour plus per GB processed (and advanced inspection for TLS). Google Cloud: Cloud NGFW Enterprise bills firewall endpoint hours plus data processed. Check the official pricing pages for current rates.
What is the Azure equivalent?
Azure Firewall (direct match). AWS Network Firewall maps to Azure Firewall.