The discrimiNAT upgrades native GCP Firewall Rules and AWS Security Groups to support hostnames/FQDNs, for a scalable egress filtering solution. It works by monitoring and blocking traffic without decryption, with our Deep Packet Inspection engine, inline as a high-availability NAT Instance on the egress of your VPC network. Gets your cloud application ready for a proper pentest by conducting out-of-band checks, such as DNS, that create a robust defence against sophisticated malware and insider threats. What's more, is the discrimiNAT firewall enforces the use of contemporary encryption standards such as TLS 1.2, TLS 1.3 and SSH v2 with bidirectional in-band checks. Anything older or insecure will be denied connection automatically.