Cloud Firewall Cloud Next Generation Firewall
Legacy names Cloud Firewall, VPC Firewall
Distributed stateful and Layer-7 network firewall service protecting Google Cloud VPC workloads.
Naming timeline
- VPC Firewall
Foundational stateful VPC firewall rules on Google Compute Engine.
- Cloud Firewall
Expanded into a tiered Cloud Firewall family with hierarchical and network firewall policies.
- Cloud Next Generation FirewallCurrent name
Cloud Firewall renamed to Cloud Next Generation Firewall (NGFW) across Essentials, Standard, and Enterprise tiers.
What is Cloud Firewall called now?
Cloud Firewall is now called Cloud Next Generation Firewall, with the latest change on 8 April 2024 (Cloud NGFW Rebrand). Earlier names covered by this entry also include VPC Firewall. Distributed stateful and Layer-7 network firewall service protecting Google Cloud VPC workloads. Only the customer-facing name changed; the underlying technical identifiers remain backward compatible.
Also known as
- Cloud NGFW Essentials
- Cloud NGFW Standard
- Cloud NGFW Enterprise
Technical identifiers
Technical identifiers unchanged. Only the customer-facing product name changed; the APIs, CLI commands, IAM roles and Terraform resources below keep their legacy identifiers for backward compatibility.
| REST / gRPC APIs | compute.googleapis.com networksecurity.googleapis.com |
|---|---|
| gcloud / CLI Commands | gcloud compute firewall-policies gcloud compute firewall-rules gcloud network-security firewall-endpoints |
| IAM Predefined Roles | roles/compute.orgFirewallPolicyAdmin roles/compute.securityAdmin roles/networksecurity.firewallEndpointAdmin |
| Terraform Resources | google_compute_firewall google_compute_network_firewall_policy google_network_security_firewall_endpoint |
Firewall rules and policies remain part of compute.googleapis.com; Layer-7 inspection endpoints use networksecurity.googleapis.com.
Notes & disambiguation
- On April 8, 2024, Cloud Firewall in Google Cloud was rebranded to Cloud Next Generation Firewall (Cloud NGFW).
- Organized into three tiers: Cloud NGFW Essentials (foundational VPC firewall rules and hierarchical/network policies), Cloud NGFW Standard (FQDN, geolocation, and threat intelligence), and Cloud NGFW Enterprise (inline Layer-7 IPS with Palo Alto Networks threat prevention).
- All underlying compute.googleapis.com and networksecurity.googleapis.com resources remain unchanged.
Sources & official documentation
Catalog last updated . Spotted an error? Suggest an edit