NGFWv in AWS for Internet Access

[zaifisafi]

We are planning to deploy NGFWv in AWS for Secure access to Internet for Central Patch Mgmt Servers. Connection will only be initiated from AWS Servers to Internet. I am not able to find any design/deployment Guides for such scenario. My questions are in such a case.

How can we deploy Active/Standby NGFWv in AWS VPC ? Is Clustering supported ?

What features should we use on NGFWv (FW/AVC/NAT/AMP/NGIPS/URL)

Can we create Sub-Interfaces on NGFWv ?

How to deploy NAT for EC2 instance using NGFWv ? 

[balaji.bandi]

For me this like normal any deploys how you do insite premises, sending server to connect to the internet to get updates.

same one more to  AWS Cloud, so you need to make network arrangement to be behind NGFW Fw for internet access.

For me AWS give you RFC1918 address space already, so they do provide some FW or Public IP information for you.

depends on the arrangement, so you can use control of what traffic to send out.