Cloud Firewalls Failed Security Evaluations
A new industry report identified significant security deficiencies in nine different cloud network firewall products.
Updated on Sept. 29, 2026 in Cybersecurity
Live Poll
Do you trust that major cloud firewall providers adequately secure your encrypted data?
CyberRatings.org published a report finding that nine tested cloud network firewalls failed to block malware or inspect encrypted traffic. The study highlighted critical gaps in security effectiveness across leading cloud-based infrastructure.
Why it matters
These failures expose a significant vulnerability in cloud security, as organizations rely on these firewalls to protect sensitive data from cyber threats. The findings suggest that current cloud-based defensive measures may be insufficient against sophisticated modern attacks.
The assessment evaluated nine cloud network firewalls on their ability to manage malware, handle encrypted traffic, and perform configuration tasks. Security performance metrics were compared across TLS support and false-positive management benchmarks.
The players
CyberRatings.org
This organization performs independent security evaluations on cloud-based products and network infrastructure.
Amazon Web Services
A subsidiary of Amazon that provides comprehensive cloud computing platforms and APIs to individuals and companies.
Microsoft
A multinational technology corporation that develops, manufactures, and supports a wide range of cloud computing and software services.
The details
The report highlights that the tested firewalls, including those from Amazon Web Services and Microsoft, were unable to effectively inspect encrypted network traffic or stop malware during the evaluation. CyberRatings.org conducted the comparison by focusing on security effectiveness, performance, and the cost of maintaining configuration.
Timeline
September 29, 2026: CyberRatings.org published the security report.
The Tech Race
This evaluation fits into the broader effort by security organizations to standardize protection levels for cloud infrastructure. It contrasts with historical hardware-based firewall benchmarks as the industry continues its shift toward virtualized cloud defense systems.
The report highlights risks for IT administrators and developers who rely on these cloud services for data protection. Users must now evaluate their current firewall configurations and consider supplementary security layers to mitigate the identified malware and encryption vulnerabilities.
The takeaway
Organizations should reassess their reliance on native cloud firewall solutions that fail to inspect encrypted traffic effectively. Implementing a multi-layered security approach is essential to compensating for these specific performance gaps.
Further reading
Learn more about the latest developments in protecting digital infrastructure in our Cybersecurity section.
Source note: This article includes information reported by Inside Cybersecurity.
Live Poll
Do you trust that major cloud firewall providers adequately secure your encrypted data?
