Cloud NGFW

gcp Firewallgoogle-cloud-ngfw

Distributed stateful firewall policies for VPC networks.

Provider: gcp
Kind: Firewall
Category: Security
Official docs: https://cloud.google.com/firewall/docs/about-firewalls

Properties · 5 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	▸ deny
intrusionPrevention	boolean	—	no	—	▸ false
logging	boolean	—	no	—	▸ false
managed	boolean	—	no	false	▸ true
newRulePriority · component property	integer	—	no	1000	inherited
policyType · component property	enum	hierarchical \| global-network \| regional-network	no	—	inherited
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	▸ true
tier · component property	enum	essentials \| standard \| enterprise	no	essentials	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "cloud-ngfw", component: "google-cloud-ngfw" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloud NGFW (Cloud Firewall): distributed stateful firewall policies attached to VPC networks.
3# Defaults from "VPC firewall rules" (implied deny ingress and implied allow egress, stateful connection tracking, rule logging disabled, new rules at priority 1000) and "About Cloud NGFW" (Essentials tier at no cost, Enterprise adds layer-7 intrusion prevention).
4schemaVersion: "1"
5type: "component"
6id: "google-cloud-ngfw"
7kind: "firewall"
8provider: "gcp"
9docs: "https://cloud.google.com/firewall/docs/about-firewalls"
10defaults:
11  managed: true
12  defaultAction: "deny"
13  stateful: true
14  logging: false
15  intrusionPrevention: false
16properties:
17  tier:
18    type: "enum"
19    values: ["essentials", "standard", "enterprise"]
20    default: "essentials"
21  policyType:
22    type: "enum"
23    values: ["hierarchical", "global-network", "regional-network"]
24  newRulePriority:
25    type: "integer"
26    default: 1000

The same page as markdown, for an agent: /catalogue/components/google-cloud-ngfw.md