AWS allows deploying a third-party network perimeter firewall using Gateway Load Balancer at Layer 3 and Layer 4 of the OSI model.
Gateway Load Balancer serves as a single entry and exit point for all traffic that needs to be inspected.
It ensures transparent traffic flow for applications and NVAs by maintaining source and destination IP addresses and ports.
An example networking architecture involves a purpose-built security VPC with Gateway Load Balancer deployed in a public subnet and NVAs in private subnets.