Cloud IDS

gcp Firewallgoogle-cloud-ids

Managed intrusion detection over mirrored VPC traffic.

Provider: gcp
Kind: Firewall
Category: Security
Official docs: https://cloud.google.com/intrusion-detection-system/docs/overview

Properties · 3 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	inherited
intrusionPrevention	boolean	—	no	—	▸ false
logging	boolean	—	no	—	▸ true
managed	boolean	—	no	false	▸ true
minimumAlertSeverity · component property	enum	informational \| low \| medium \| high \| critical	no	—	inherited
packetMirroring · component property	boolean	—	no	true	inherited
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	inherited
zonal · component property	boolean	—	no	true	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "cloud-ids", component: "google-cloud-ids" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloud IDS endpoint: a zonal, Google-managed intrusion detection service built on Palo Alto Networks threat signatures.
3# Defaults from "Cloud IDS overview": it detects and alerts but takes no action to prevent attacks, and it inspects a copy of traffic delivered by Packet Mirroring.
4schemaVersion: "1"
5type: "component"
6id: "google-cloud-ids"
7kind: "firewall"
8provider: "gcp"
9docs: "https://cloud.google.com/intrusion-detection-system/docs/overview"
10defaults:
11  managed: true
12  intrusionPrevention: false
13  logging: true
14properties:
15  packetMirroring:
16    type: "boolean"
17    default: true
18  minimumAlertSeverity:
19    type: "enum"
20    values: ["informational", "low", "medium", "high", "critical"]
21  zonal:
22    type: "boolean"
23    default: true

The same page as markdown, for an agent: /catalogue/components/google-cloud-ids.md