AWS Network Firewall JA4 No SNI Detection

Lawton Pittenger@lawtonpittenger

•updated Nov 21, 2025•0•62

This rule identifies and blocks TLS connections using JA4 fingerprints without SNI, as they may indicate suspicious, potentially malicious encrypted traffic.