Cloud Firewall’s fully
distributed, stateful inspection firewall engine is built
natively into our software defined networking fabric and
enforced at each workload.
Advanced threat
protection
Cloud Firewall offers a
cloud-first, market-leading, easy to deploy Intrusion
Prevention System powered by Palo Alto Networks for inline
protection against malware, spyware, and command-and-control
attacks on your network.
To use Cloud Firewall, you’ll first create a firewall
policy. Then you'll be able to configure rules to help
protect your cloud workloads against both internal and
external attacks and meet compliance requirements.
Cloud Firewall Plus offers a
cloud-first, market-leading, easy to deploy
Intrusion Prevention System (IPS). It helps
prevent malware, spyware, and command-and-control
attacks on your network by inspecting both TLS and
non-TLS traffic.
Block traffic based on curated
lists of threat intelligence data, such as known
malicious IPs and domains. Allow public IPs that
your service uses. These lists are managed by
Google Cloud and aggregate data from various
Google, third-party, and open-source feeds.
Tags provide built-in IAM
governance for firewall policies. Each tag has
granular controls to determine which users can create,
modify, and bind individual tags. Combined with
network firewall policies, these features help
increase policy precision and simplify rule creation
to deliver micro-segmentation.
Network firewall policies let
you group multiple firewall rules, apply batch
updates, and control access to these rules with
Identity and Access Management (IAM) roles.
Hierarchical Firewall Policies can be applied at
the organization and folder level, and Global and
Regional Network Firewall Policies can be applied
at the VPC level.
Documentation
