Comprehensive Assessment of Cloud Native Firewalls Reveals Gaps in Security Protection

Evaluation of Cloud Provider Firewalls

In a recent announcement, CyberRatings.org has published an insightful evaluation of the native firewalls provided by key players in the cloud service sector, namely Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This independent test, described as the 'Mini-Test,' analyzed how effectively these firewalls block cyber threats, using real-world exploits to gauge performance.

The Context of the Evaluation

As businesses migrate more of their operations to the cloud, the importance of robust cybersecurity measures has never been clearer. Cloud native firewalls are often the first line of defense against external threats, but choosing the right one is essential for protecting sensitive data and maintaining trust with customers. CyberRatings.org aims to provide unbiased insights regarding security product efficacy, assisting companies in making informed decisions.

Key Findings of the Test

Using Keysight's CyPerf v5.0 testing platform, CyberRatings assessed the native firewalls against a selection of 522 Common Vulnerabilities and Exposures (CVEs) from the last decade. The results showed alarming gaps in security effectiveness, demonstrating a broad range of protection results across different providers:

- AWS Network Firewall:

- Blocked Exploits: 2 out of 522 (0.38% block rate)
- Missed Exploits: 520

- Microsoft Azure Firewall Premium:

- Blocked Exploits: 126 (24.14% block rate)
- Missed Exploits: 396

- Google Cloud NGFW Enterprise Firewall:

- Blocked Exploits: 264 (50.57% block rate)
- Missed Exploits: 258

These statistics underscore the disparity in effectiveness among the different firewall solutions. The results indicate serious concerns, particularly with AWS's offering, which proved to be significantly less effective in blocking cyber threats.

Insights from CyberRatings.org

Vikram Phatak, CEO of CyberRatings.org, emphasized the test's preliminary nature, stating that more comprehensive evaluations, including advanced threat scenarios, are necessary to obtain a detailed understanding of each product's capabilities. He noted, "The number of missed exploits is concerning. Until cloud native firewalls demonstrate a higher level of security effectiveness, we strongly recommend that customers consider third-party solutions with proven track records."

Phatak's comments reflect a growing concern in the cybersecurity community regarding reliance on CSPs' native offerings without rigorous independent validation.

The Future of Testing

This test represents just the first part of a two-part evaluation plan. The next phase will include a broader array of exploits, as well as testing features like evasion techniques and malware resilience. This enhanced testing will allow for a more thorough comparison between native solutions and leading third-party firewalls.

For companies aiming to protect their cloud operations, the takeaway is clear: vigilance in evaluating security solutions is crucial. Entities looking to explore the testing results more thoroughly can access the full report on CyberRatings.org.

Conclusion

As the demand for cloud services expands, understanding the capabilities and limitations of integrated firewall systems is imperative. CyberRatings.org's ongoing assessments provide essential insights that contribute to fostering a more secure cloud environment. Organizations must be proactive in their approach to cybersecurity to mitigate risks associated with deploying cloud-native firewalls and ensure that their digital infrastructure can withstand the evolving threat landscape.