You can see the latest product updates for all of Google Cloud on the
Google Cloud page, browse and filter all release notes in the
Google Cloud console,
or programmatically access release notes in
BigQuery.
To get the latest product updates delivered to you, add the URL of this page to your
feed
reader, or add the
feed URL directly.
August 04, 2025
v1
You can create a secure tag at the organization level and bind its value to all virtual machine (VM) instances across that organization. For more information, see Secure tags for firewalls. This feature is available in General Availability.
July 25, 2025
v1
You can create a Remote Direct Memory Access (RDMA) over converged ethernet (RoCE) Virtual Private Cloud (VPC) network and configure firewall rules that apply to the network. For more information, see Cloud NGFW for RoCE VPC networks. This feature is available in Preview.
June 23, 2025
v1
You can create a secure tag at the organization level and bind its value to all virtual machine (VM) instances across that organization, instead of applying tags to instances within a specific network. For more information, see Secure tags for firewalls. This feature is available in Preview.
April 24, 2025
v1
You can use a single request to batch update all the firewall policy rules for hierarchical and network firewall policies. For more information, see Overview of batch update to firewall policy rules. This feature is available in General Availability.
December 13, 2024
v1
You can use network scopes to meet your security goals by using fewer firewall policy rules more efficiently. This feature is available in Preview. For more information, see Network scopes.
August 28, 2024
v1
You can use custom constraints to provide more granular and customizable control over specific fields for firewall policy resources. For more information, see Manage firewall policy resources by using custom constraints. This feature is available in General Availability.
April 08, 2024
v1
Cloud NGFW Enterprise, including the intrusion prevention service, is available in General Availability. Use intrusion prevention service to safeguard your workload traffic from threats such as malware, spyware, and command-and-control attacks.
You can use fully qualified domain name (FQDN) objects in firewall policy rules to filter incoming or outgoing traffic from specific domain names. This feature is available in General Availability.
September 08, 2023
v1
Starting September 8, 2023, you will be charged for the following Cloud Firewall Standard features:
You can use intrusion prevention service to safeguard your workload traffic from threats such as malware, spyware, and command-and-control attacks. This feature is available in Preview.
June 30, 2023
v1
You can use custom constraints to provide more granular and customizable control over specific fields for VPC firewall rule resources. For more information, see Manage firewall resources by using custom constraints. This feature is available in Preview.
June 26, 2023
v1
Address groups are a logical collection of either IPv4 address ranges or IPv6 address ranges in CIDR format. You can use address groups to define consistent sources or destinations referenced across multiple rules in the same or different firewall policies. This feature is available in General Availability.
June 05, 2023
v1
Use Geo-location objects in firewall policy rules to filter external IPv4 and external IPv6 traffic based on specific geographic locations or regions. This feature is available in General Availability.
Use Threat Intelligence for firewall policy rules to secure your network by allowing or blocking traffic based on threat intelligence data. This feature is available in General Availability.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis page documents release notes for Cloud Next Generation Firewall (NGFW) features and updates, with earlier updates found in the Virtual Private Cloud (VPC) release notes.\u003c/p\u003e\n"],["\u003cp\u003eNew features include network scopes in preview, which allow for more efficient firewall policy rules, and custom constraints in general availability, for more granular control over firewall policies.\u003c/p\u003e\n"],["\u003cp\u003eCloud NGFW Enterprise, inclusive of intrusion prevention services, is now generally available and will be a billable service from April 9, 2024.\u003c/p\u003e\n"],["\u003cp\u003eSeveral features are now generally available or have become billable, including fully qualified domain name (FQDN) objects, geo-location objects, and threat intelligence for firewall policy rules.\u003c/p\u003e\n"],["\u003cp\u003eAddress Groups, the logical groupings of IPv4 and IPv6 address ranges, have been released to general availibility, to be used across multiple rules in firewall policies.\u003c/p\u003e\n"]]],[],null,["# Cloud NGFW release notes\n\nThis page contains release notes for features and updates to Cloud Next Generation Firewall.\n\nTo view Cloud NGFW announcements prior to April 2023, see the\n[Virtual Private Cloud (VPC) release notes](/vpc/docs/release-notes).\n\n\nYou can see the latest product updates for all of Google Cloud on the\n[Google Cloud](/release-notes) page, browse and filter all release notes in the\n[Google Cloud console](https://console.cloud.google.com/release-notes),\nor programmatically access release notes in\n[BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table).\n\nTo get the latest product updates delivered to you, add the URL of this page to your\n[feed\nreader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the\n[feed URL](https://cloud.google.com/feeds/cloud-firewall-release-notes.xml) directly.\n\nAugust 04, 2025\n---------------\n\nv1 \nYou can create a secure tag at the organization level and bind its value to all virtual machine (VM) instances across that organization. For more information, see [Secure tags for firewalls](https://cloud.google.com/firewall/docs/tags-firewalls-overview). This feature is available in **General Availability**.\n\nJuly 25, 2025\n-------------\n\nv1 \nYou can create a Remote Direct Memory Access (RDMA) over converged ethernet (RoCE) Virtual Private Cloud (VPC) network and configure firewall rules that apply to the network. For more information, see [Cloud NGFW for RoCE VPC networks](https://cloud.google.com/firewall/docs/firewall-for-roce). This feature is available in **Preview**.\n\nJune 23, 2025\n-------------\n\nv1 \nYou can create a secure tag at the organization level and bind its value to all virtual machine (VM) instances across that organization, instead of applying tags to instances within a specific network. For more information, see [Secure tags for firewalls](https://cloud.google.com/firewall/docs/tags-firewalls-overview). This feature is available in **Preview**.\n\nApril 24, 2025\n--------------\n\nv1 \nYou can use a single request to batch update all the firewall policy rules for hierarchical and network firewall policies. For more information, see [Overview of batch update to firewall policy rules](https://cloud.google.com/firewall/docs/batch-update-overview). This feature is available in **General Availability**.\n\nDecember 13, 2024\n-----------------\n\nv1 \nYou can use network scopes to meet your security goals by using fewer firewall policy rules more efficiently. This feature is available in **Preview** . For more information, see [Network scopes](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#network-scopes).\n\nAugust 28, 2024\n---------------\n\nv1 \nYou can use custom constraints to provide more granular and customizable control over specific fields for firewall policy resources. For more information, see [Manage firewall policy resources by using custom constraints](https://cloud.google.com/firewall/docs/custom-constraints-fw-policy). This feature is available in **General Availability**.\n\nApril 08, 2024\n--------------\n\nv1 \nCloud NGFW Enterprise, including the [intrusion prevention service](https://cloud.google.com/firewall/docs/about-intrusion-prevention), is available in **General Availability**. Use intrusion prevention service to safeguard your workload traffic from threats such as malware, spyware, and command-and-control attacks. \nStarting **April 9, 2024** , you will be charged for the Cloud NGFW Enterprise feature---[intrusion prevention service](https://cloud.google.com/firewall/docs/about-intrusion-prevention). For more information about billing, see [Cloud NGFW pricing](https://cloud.google.com/firewall/pricing). \nCloud Firewall in Google Cloud is now Cloud Next Generation Firewall (NGFW). For more information, see [Cloud NGFW](https://cloud.google.com/security/products/firewall).\n\nSeptember 30, 2023\n------------------\n\nv1 \nStarting **September 30, 2023** , you will be charged for the Cloud Firewall Standard feature---[fully qualified domain name (FQDN) objects](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#domain-names-for-firewall). For more information about billing, see [Cloud Firewall pricing](https://cloud.google.com/firewall/pricing).\n\nSeptember 27, 2023\n------------------\n\nv1 \nYou can use [fully qualified domain name (FQDN) objects](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#domain-names-for-firewall) in firewall policy rules to filter incoming or outgoing traffic from specific domain names. This feature is available in General Availability.\n\nSeptember 08, 2023\n------------------\n\nv1 \nStarting **September 8, 2023**, you will be charged for the following Cloud Firewall Standard features:\n\n- [Geo-location objects](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#geo-location-object)\n- [Threat Intelligence for firewall policy rules](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#threat-intelligence-fw-policy)\n\nFor more information about billing, see [Cloud Firewall pricing](https://cloud.google.com/firewall/pricing).\n\nAugust 29, 2023\n---------------\n\nv1 \nYou can use [intrusion prevention service](https://cloud.google.com/firewall/docs/about-intrusion-prevention) to safeguard your workload traffic from threats such as malware, spyware, and command-and-control attacks. This feature is available in **Preview**.\n\nJune 30, 2023\n-------------\n\nv1 \nYou can use custom constraints to provide more granular and customizable control over specific fields for VPC firewall rule resources. For more information, see [Manage firewall resources by using custom constraints](https://cloud.google.com/firewall/docs/custom-constraints). This feature is available in **Preview**.\n\nJune 26, 2023\n-------------\n\nv1 \n[Address groups](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#address-group-for-firewall) are a logical collection of either IPv4 address ranges or IPv6 address ranges in CIDR format. You can use address groups to define consistent sources or destinations referenced across multiple rules in the same or different firewall policies. This feature is available in **General Availability**.\n\nJune 05, 2023\n-------------\n\nv1 \nUse [Geo-location objects](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#geo-location-object) in firewall policy rules to filter external IPv4 and external IPv6 traffic based on specific geographic locations or regions. This feature is available in **General Availability**. \nUse [Threat Intelligence for firewall policy rules](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#threat-intelligence-fw-policy) to secure your network by allowing or blocking traffic based on threat intelligence data. This feature is available in **General Availability**.\n\nApril 28, 2023\n--------------\n\nv1 \n**General Availability:** You can specify the [source IP ranges for egress firewall rules](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#hfp-nfp-egress-src) and the [destination IP ranges for ingress firewall rules](https://cloud.google.com/firewall/docs/firewall-policies-rule-details#hfp-nfp-ingress-dest)."]]