TLS inspection with a Next Generation policy in AWS Network Firewall

You can use TLS inspection with a Next Generation policy. For information about Next Generation policies, see Next Generation policies.

A Next Generation policy supports session holding only

A Next Generation policy supports session holding only. This differs from a Classic Network Firewall policy, where session holding is optional and off by default. For information about session holding, see Using session holding with TLS inspection in AWS Network Firewall.