Name: Common Design Patterns for Next Generation Firewall Insertion in AWS
Start: 2021-07-29T17:00:00Z
End: 2021-07-29T17:00:47.000Z
Location: BrightTALK

Aviatrix® is the cloud networking expert. We’re on a mission to make cloud networking simple so companies stay agile. Trusted by more than 500 of the world’s leading enterprises, our cloud networking platform creates the visibility, security, and control needed to adapt with ease and move ahead at speed. Combined with the Aviatrix Certified Engineer (ACE) Program, the industry’s leading multicloud networking and security certification, Aviatrix empowers the cloud networking community to stay at the forefront of digital transformation. Learn more at www.aviatrix.com.

The BCBS community is under pressure to modernize member services while securing sensitive PHI across complex, multicloud environments. At the same time, federated structures, inconsistent security policies, and unpredictable costs create unnecessary complexity that puts compliance and member trust at risk.

In this webinar, you’ll see how BCBS organizations are moving from complexity to clarity with a proven, cloud native approach to zero trust. Learn how peers are strengthening security, simplifying compliance, and optimizing cloud spend—while building a more resilient foundation for digital health innovation.

What you’ll take away:

Zero Trust Made Practical: How BCBS organizations are using a consistent segmentation fabric to isolate PHI, enforce least privilege, and simplify compliance across AWS, Azure, and on-prem.
Visibility Without Gaps: How to get a single, real-time view of all cloud traffic—east-west and north-south—so you can detect threats faster and satisfy auditors without stitching tools together.
Predictable Cloud Economics: How plans are reducing unpredictable transit and egress charges by routing traffic intelligently—turning cloud bills into controllable budgets.
Faster Rollouts of Member Services: How automation can shrink deployment cycles from weeks to hours, helping you launch secure digital health initiatives sooner.
Built-In Resilience: How BCBS organizations are designing fault-tolerant, multicloud architectures that keep member services always available, even during outages or attacks.

BCBS Security Playbook: Learn Proven Cloud Native Security Strategies

Join us to explore the critical findings from "The State of Cloud Network Security: 2025," an industry report examining the evolving landscape of cloud security challenges and opportunities facing organizations today.

Despite high confidence in existing cloud security controls, organizations continue to struggle with significant gaps in their security postures, particularly in the foundational network layer where workloads communicate and threats propagate.

Security veteran Tom Pageler and Aviatrix will discuss how security and networking have emerged as the primary obstacles to maximizing cloud investments, with 68% and 59% of respondents citing these as their top challenges respectively.

Key topics will include:

The implementation challenges of widely adopted cloud firewalls and their integration complexities
The gap between zero trust aspirations and actual implementation (with only 8% adoption for inter-region and inter-cloud traffic)
Persistent blind spots in cloud network security that create vulnerabilities
The lack of transparency in legacy cloud firewall costs, with 63% of organizations reporting unexpected expenses
The shortage of skilled security personnel (affecting 69% of organizations) and its impact on cloud security management
The state of DevOps security and east-west traffic controls
The promising adoption of AI in security operations
Learn how your organization can develop a unified approach across hybrid and multicloud environments to reduce complexity, strengthen security postures, and achieve better return on cloud investments while navigating the evolving threat landscape.

The State of Cloud Network Security 2025: Navigating Complexity and Securing the Future

Join security industry veterans, Aviatrix CEO Doug Merritt, and a Leading Industry Analyst John Grady of Enterprise Strategy Group as they “Mind the Gap” in current security approaches.

The cloud has atomized your security perimeter — creating hundreds of thousands of dynamic, ephemeral pathways between workloads that your existing tools simply can’t see. These invisible gaps form the largest unprotected attack surface in your enterprise—and adversaries are exploiting them, undetected.

Modern enterprises are contending with several cloud workload security challenges:

Agentic AI Crisis – Shadow AI & autonomous systems are bypassing security controls
App Modernization – Breaking the monolith can also break your security
Data Exfiltration Prevention – Data loss propagates through unmonitored cloud pathways
Multicloud Fragmentation – Policy fragmentation is occurring across incompatible systems
Third-Party Data Sovereignty – Challenges arise with securely onboarding, isolations, and securing customer data
Edge Explosion – Securing thousands of micro-perimeters
Compliance – Delivering visibility and proof for evolving requirements
Developer Requirements – Security policies are lagging behind automated deployments, slowing business deliverables or creating security gaps
These problems demand a new approach — a Cloud Native Security Fabric. This new paradigm directly solves the challenges plaguing organizations today by:

Securing east-west (or lateral) traffic with full workload-to-workload visibility
Filling the new gap in zero trust architectures
Enforcing security policies in real time, exactly where communication happens
Integrating seamlessly with your existing tools to amplify their reach
Don’t miss this exclusive webinar as industry visionaries unveil the new approach to cloud security that gives security teams the visibility and control they've been missing. Discover how enterprises can close their most dangerous blind spots—once and for all.

Cloud Native Security Fabric: The New Standard for Securing the World's Digital Fabric

Explore How Two Cloud Leaders Are Teaming Up to Make the Internet Safer and Smarter

Aviatrix and Wiz—two of the most innovative companies in cloud networking and cloud security—are partnering to tackle one of the biggest challenges of our digital world: keeping cloud systems safe, efficient, and under control.

Join us for a special session where we’ll break down how this partnership is changing the game for companies everywhere.

Here’s What You’ll Learn:

How Aviatrix and Wiz deliver powerful runtime risk mitigation and threat negation
Real-life examples of we provide an actionable view of potential and actual threats and how to respond
What this collaboration could mean for the future of online safety
Live Q&A with solution experts
Why It Matters:

Even if you're not in the cloud trenches every day, this conversation offers a behind-the-scenes look at how top tech companies are teaming up to solve real problems—so the apps you use, the data you trust, and the internet itself can be more secure and reliable.

Real-Time Cloud Security: From Detection to Action with Aviatrix + Wiz

Planning your Epic or EMR migration to the AWS cloud? Realize the full potential of this powerful platform while overcoming complex networking and security challenges. Join our webinar on June 11th, brought to you by Aviatrix and AWS, to learn how our joint solution simplifies and secures your journey. We understand the performance demands, strict HIPAA compliance requirements, and the need for resilient, observable infrastructure when moving critical healthcare applications. Discover how Aviatrix's modern network and security architecture, built to complement AWS services, delivers a consistent, high-performance fabric with features like near line rate encryption, centralized policy management, and automated resilience. Together, Aviatrix and AWS provide a robust and efficient approach to ensure the security and operational integrity of your Epic environment and the sensitive PHI it manages on AWS.

Accelerating, Modernizing and Securing Epic in AWS: A Purpose-Built Networking and Security Approach

Join us for an insightful session on addressing the most critical challenges in enterprise Kubernetes deployments: Dynamic security that persists outside the cluster, and IP address exhaustion. 

Kubernetes adoption is surging by 68% year-over-year and now powers production workloads in over 96% of organizations running containerized applications. As enterprises accelerate their application modernization efforts, they face the hidden complexity of Kubernetes environments, struggling with implementing granular security that uses Kubernetes attributes for dynamic policy reconciliation.  

In addition, Kubernetes deployments consume up to ten times more IP addresses than traditional VM-based architectures, which often manifests with overlapping or non-routable IP address schemas. These are hard to manage and harder to build a scalable, secure policy for enforcement.

Scalable, Secure, and Synergetic: Aviatrix Kubernetes Firewall

While cloud adoption has certainly revolutionized business operations, cloud has opened a Pandora’s box of security threats—from ransomware to AI-driven attacks that are rapidly increasing in scale and complexity. What’s more, critical security gaps exist, particularly runtime network security, necessitating a holistic cloud data protection approach.

Aviatrix’s Senior Vice President of Product Management, Chris McHenry, joins John Grady, Principal Analyst, Network Security & Web Application Security, Enterprise Strategy Group in this fireside chat, live from Broadcast Alley at RSAC 2025 to examine the future of converged multi-cloud network security, with a keen eye on how the multi-cloud impacts network security and how to fill inevitable coverage gaps.  

Watch this session to discover multi-cloud security best practices, how to prevent cloud network security risks, and how to use Wiz with tools like Aviatrix for simplified, real-time, proactive cloud remediation.

The Future of Multi-Cloud Network Security: New Trends & Coverage Gaps

Are you getting the most out of your cloud network security solution?

Securing cloud environments requires more than basic segmentation and filtering—it demands a strategy that balances agility, scalability, and deep visibility. While both native and third-party solutions offer different approaches, making the wrong choice can leave your organization vulnerable and locked into a rigid framework. Before committing, it's critical to evaluate:

* Centralized vs. distributed security models
* L4 vs. L7 inspection for advanced threat protection
* Quotas, limitations, and hidden constraints
* Scalability to meet evolving threats
* Automation, policy management, and Infrastructure-as-Code (IaC)
* Cost efficiency vs. security trade-offs
* Real-time monitoring and proactive threat detection
* Join Aviatrix and CloudNation as we break down the security challenges of cloud network protection in AWS and Azure.

Learn how we enhance cloud security with a unified, scalable, and intelligent approach—offering deep visibility, robust policy control, and seamless multi-cloud protection. Don’t let security gaps put your business at risk—discover how to take control of your cloud network security with confidence.

Aviatrix & CloudNation Webinar: The rabbit hole of cloud network security

Azure is decommissioning default egress for new workloads, is your environment prepared for this architecture change?

Internet access can be crucial for workloads, for example to exchange data, integrate with SaaS or download updates. Azure is retiring default outbound access for virtual machines as of September 2025, terminating internet access for new services and forcing organizations to find a new solution.

To avoid breaking systems, cloud architects can either adopt applicable Azure native services, or custom solutions, each are different in several aspects:

- Security posture
- Visibility/Observability
- Availability & scalability
- Pricing components
- Quotas & limitations
- Operational overhead

Aviatrix and CloudNation explore what this architectural change means for you, the different options available to keep your systems and services on-line, and the pros and cons of each.

Is your Azure egress covered?

Starting September 2025, Microsoft is eliminating default outbound internet access for all Azure Virtual Networks (VNets). Organizations must now route outbound traffic through a NAT Gateway, Azure Firewall, or a third-party security solution. If you don’t prepare, your mission-critical applications could experience service disruptions, security vulnerabilities, and compliance failures.

This change is not optional. Will your Azure environment be ready in time?

Hear from Daniel Mauser, Principal Solution Specialist at Microsoft and Azure Global Black Belt (GBB), and Bryan Ashley, VP of Product Marketing at Aviatrix and former Azure GBB, for a critical briefing on what this means for your cloud environment, the risks of inaction, and the best strategies to secure your outbound traffic.

Key Takeaways:

- Microsoft’s Perspective on the Change – Hear directly from Microsoft about why this update is happening, what’s at stake, and what organizations must do to comply.
- Security & Compliance Risks – Understand the potential security blind spots, compliance challenges, and operational disruptions that could arise if you don’t act now.
- How Aviatrix Cloud Perimeter Security Helps – Discover how Aviatrix provides a scalable, enterprise-grade security solution that simplifies outbound access while enhancing performance and compliance.

This information is designed for Azure customers, cloud architects, security teams, and DevOps engineers who are responsible for managing and securing outbound internet connectivity. If your organization runs workloads in Azure, this change WILL impact you.

With the deadline fast approaching, organizations that delay could face costly, last-minute fixes or security vulnerabilities. Don’t wait until September 2025 to figure this out—Act now and get ahead of the change.

Microsoft’s Change Will Disrupt Your Azure Network - Are Your VNets Ready?

Are you fully capturing the business value of your cloud investments? Join Bryan Ashley (VP of Product Marketing) and David Pektas (Director of Business Value) as they explore how FinOps professionals and decision-makers can enhance the value of cloud initiatives to unlock incremental ROI.

In this webinar, you’ll learn:
- How to identify and quantify the key value categories of cloud investments using the Command of the Message framework.
- Practical strategies FinOps practitioners can use to influence cloud investment decisions and align with organizational goals.
- How a proactive, "shift-left" approach in the business value lifecycle ensures cloud investments deliver maximum impact.

Don’t miss this opportunity to elevate your FinOps expertise and ensure your cloud strategy delivers maximum business value.

Unlocking Cloud Value: Strategies for Shifting Left and Maximizing ROI with FinOps

Are you exposing yourself to massive risk by leveraging insecure outbound methods such as cloud-native NAT gateways?

NAT gateways may give you quick and easy access to OS updates, code repositories, etc. But, left unchecked, they are a major security risk, exposing you to:
• Malicious and non-corporate sites
• Malware command and control
• Data exfiltration mishaps
• Compliance and regulatory issues
• General negative brand impact.

Watch Part 1 of our 3-part webinar series where we investigate how you can address the need for agile and flexible outbound internet access, with security and visibility embedded, at a reduced overall cost with this session focused on embedded security for superior protection.

Achieving Unrivalled Cost Efficiency, Visibility and Security: Tactical Approach to NAT Gateway Replacement

At AWS re:Invent 2024, we shared how you can unlock the potential of generative AI on Amazon Bedrock using secure, high-volume data transfers to Amazon S3 for RAG. If you couldn’t join us live or simply wish to revisit the insights, access the on-demand recording now.

You will:
- Explore optimized networking strategies for populating your Amazon Bedrock Knowledge Bases to improve AI outcomes with rich context using your data
- Learn to design and implement secure, high-performance connectivity solutions that move massive datasets across hybrid and multicloud environments
- Discover how Aviatrix ensures private and secure prompt delivery and response, safeguarding your sensitive AI interactions

Ready to position yourself as a leader of your organization's AI ambitions in complex cloud landscapes? Watch this session now.

RAG and Route: Enhancing Networks to Support Amazon Bedrock

Join an exclusive conversion featuring Aviatrix CEO—Doug Merritt, former AWS VP (Engineering, Control Services, Migration Tools and Marketplace) /Owner, McCann Advisory—David McCann, former Aon CTO/CIO—Rajeev Khanna, and AWS Global Partner Leader—Vinit Anshuman. Together, they’ll dive into why cloud networking has become mission-critical in today’s enterprise landscape, where applications and workloads increasingly rely on seamless, secure cloud connectivity.

This session will explore:
- Perspectives on Cloud Networking: We’ll discuss why companies must prioritize cloud networking to drive business resilience, optimize costs, and ensure operational efficiency and share insights on how a robust cloud network architecture can support these goals.
- Cloud Networking Trends and Industry Challenges: We’ll cover specific challenges facing different industries and offer strategies for overcoming them. Gain practical advice on improving security, network visibility, and performance across various verticals.
- Supporting AI Workloads in the Cloud: Explore the complexities of migrating and supporting AI workloads in the cloud, along with solutions to meet the demands of high-performance networking, scalability, and robust data security.
- The Power of Partnerships in Cloud Connectivity: Learn why partnerships are essential for ensuring seamless connectivity and operational agility, and how strategic collaborations enhance the ability to build resilient, secure, and scalable enterprise cloud networks.

This session is ideal for IT leaders and cloud strategists looking to deepen their understanding of cloud networking and gain actionable strategies for optimizing resilience, security, and performance in an evolving digital landscape. Don’t miss the opportunity to connect with industry executives and stay ahead of the latest advancements shaping the future of cloud technology.

Master Your Cloud Networking: Expert Panel on Optimization, Security, and Future Trends

In this 2-part series, we’ll be joined by Dhanil Parwani, AWS’s Sr. Partner Solutions Architect for Networking & Security, to explore how AWS Cloud WAN and Aviatrix enable global networking at scale and unlock cutting-edge features like multicloud support, network traffic visibility, and robust security measures.

Join us for Part 2 as we dive into Aviatrix’s integration with AWS Cloud WAN Service Insertion. You will learn how this integration allows customers to achieve centralized east-west and internet-egress inspection, secure multicloud connectivity, encrypted on-premises connectivity, secure connectivity to AWS partitions like AWS China and AWS GovCloud, and B2B connectivity with partners. Depending on the customer’s preference, this can be achieved with either Aviatrix’s native firewall capability or with a third-party NGFW.

From Visibility to Security: Enhancing AWS CloudWAN with Advanced Networking Capabilities [Part 2]

In this 2-part series, we’ll be joined by Dhanil Parwani, AWS’s Sr. Partner Solutions Architect for Networking & Security, to explore how AWS Cloud WAN and Aviatrix enables global networking at scale and unlocks the full potential with cutting-edge features like multicloud support, network traffic visibility, and robust security measures.

Join us on for Part 1 as we cover Aviatrix’s AWS Cloud WAN Connector — your bridge to extending network segments. You will learn how to extend Cloud WAN network segments across multiple clouds and private data centers while maintaining unique security zones. Aviatrix’s Cloud WAN Connector also enables automated orchestration of the multicloud extension gateways to replicate segment information.

Part 2 will dive into Aviatrix’s integration with AWS Cloud WAN Service Insertion — elevating AWS networking and security.

Discover how this powerful combination enhances network security, visibility, and scalability on a global scale with AWS and Aviatrix and register for Part 1 today.

From Visibility to Security: Enhancing AWS CloudWAN with Advanced Networking Capabilities [Part 1]

Join us for an insightful webinar in which Megaport and Aviatrix unveil their strategic partnership to revolutionize hybrid and multi-cloud network connectivity. This collaboration addresses the increasing complexity and fragmented architectures enterprises operating in hybrid cloud environments face. Discover how the combined strengths of Megaport’s global private network and Aviatrix's cloud networking and security solutions offer unprecedented security, resilience, and compliance.

What you'll learn:
- Enhanced Security and Resilience: Learn how the integrated solutions provide secure, resilient, and high-performance multi and hybrid cloud connectivity, meeting the stringent compliance needs of regulated industries such as healthcare and finance. 
- Cost Reduction and Simplification: Explore how the partnership simplifies connectivity and reduces costs, offering a seamless, cloud-like experience for building resilient, encrypted hybrid network environments.
- Future-Ready Solutions: Understand the future demands of hybrid cloud connectivity and how this partnership anticipates and addresses these needs.

Simplifying Hybrid and Multicloud Network Connectivity with Megaport and Aviatrix®

Join us for an insightful interview between international cloud influencer, David Linthicum, and Aviatrix CEO, Doug Merritt. They will explore groundbreaking strategies in cloud networking and AI data management. This engaging discussion, also streamed on X and YouTube, will highlight how Aviatrix is innovating in cloud networking by providing services-as-a-network to enhance performance, security, and transparency across multiple clouds. Learn how these strategies can significantly reduce costs for multicloud customers.

Doug will also share the success of the Aviatrix Certified Engineer (ACE) program, which has transformed the careers of over 20K+ participants by fostering a unified vision and orchestration framework. Discover future plans for a self-service model incorporating AI, set to revolutionize the industry in 2025.

The conversation will emphasize the importance of architectural optimization, AI integration, and managing increasing data complexity. Doug will offer insights into the need for abstraction layers to manage complexity efficiently, ensuring businesses maintain a competitive edge.

Don’t miss this opportunity to gain valuable perspectives from Doug and David. This event promises actionable insights and strategic vision for anyone navigating the dynamic landscape of cloud technology and AI.

Navigating the Future of Cloud Networking:  Strategy, Innovation, and AI Integration

In 2020, AWS released a new network service – Gateway Load Balancer (GWLB). The service promised easy insertion of Next Generation Firewalls (NGFWs) for securing application workloads and Internet egress. But does it deliver as promised?

This Tech Talk will cover common design patterns for firewall insertion in the cloud, and the unique challenges enterprises face. Learn how Aviatrix simplifies firewall insertion and delivers the operational visibility and multi-cloud consistency enterprises require.

Common Design Patterns for Next Generation Firewall Insertion in AWS

Security

Cloud

Cloud Security

Network Security

Automation

Cloud Adoption

Cloud Architecture

Infrastructure

Next Generation Firewall

multicloud

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Common Design Patterns for Next Generation Firewall Insertion in AWS

Presented by

About this talk

Aviatrix