title: Map AWS Network ACL to Network Firewall Rule Group
body: <p>My current setup have one network ACL for each subnet. I wanted to add aws network firewall into my setup.</p>
  <ol>
  <li><p>Network ACL is stateless. For inbound, we specify the source, protocol, port(s). Same for outbound. But for Network Firewall stateless rule group, there is source and destination together. How can I map the current network ACL to Network Firewall stateless rule group?</p>
  </li>
  <li><p>If I have Network ACL, WAF, Shield Advanced, do I still need Network Firewall?</p>
  </li>
  </ol>