Skip to content
SPECIFICTION
Get listed

Google Cloud NGFW

cloud.google.com

From $0.02/mo Free plan WebAPI
Visit cloud.google.com
Spec score 8.8 #9 of 76 in Firewall Software

Spec sheet

Supported platforms
web,apiRead 22 Sep 2026 · cloud.google.com
Free plan
YesRead 22 Sep 2026 · cloud.google.com
Automation interfaces
Google Cloud documents APIs and the gcloud CLI for Cloud NGFW and provides Terraform guidance for hierarchical firewall policy configuration.Read 28 Sep 2026 · docs.cloud.google.com
Central management
YesRead 22 Sep 2026 · cloud.google.com
Data protection
Google Cloud states that it encrypts data in transit between its facilities and at rest, with access to encryption keys limited to authorized roles and services with audited access.Read 28 Sep 2026 · cloud.google.com
Distributed inspection
Cloud NGFW uses a fully distributed, stateful inspection firewall engine built into Google Cloud's software-defined networking fabric and enforced at each workload.Read 28 Sep 2026 · cloud.google.com
Documentation and support
Cloud NGFW documentation provides quickstarts, guides, references, troubleshooting help, quotas and limits, billing questions, training, and code samples.Read 28 Sep 2026 · docs.cloud.google.com
Domain filtering
FQDN-based objects filter traffic by domain even when the underlying IP addresses change.Read 28 Sep 2026 · cloud.google.com
Dynamic policy objects
Google Cloud Threat Intelligence lists, FQDN objects, and geolocation objects are curated by Google, constantly updated, and automatically applied in firewall rules that call them.Read 28 Sep 2026 · cloud.google.com
Endpoint limits
Firewall endpoints support a maximum of 250 Mbps per connection with TLS inspection and 1.25 Gbps without TLS inspection.Read 28 Sep 2026 · docs.cloud.google.com
Intended workloads
Cloud NGFW is designed to protect Google Cloud workloads against external threats from the internet and internal threats within the network.Read 28 Sep 2026 · docs.cloud.google.com
Micro-segmentation
IAM-governed tags provide granular control over north-south and east-west traffic down to a single VM across VPCs and organizations.Read 28 Sep 2026 · cloud.google.com
Outbound control
advancedRead 22 Sep 2026 · cloud.google.com
Policy hierarchy
Network firewall policies are global by default, apply to all regions, and can be defined at organization, folder, and project levels with hierarchical firewall policies.Read 28 Sep 2026 · cloud.google.com
Rule direction
bothRead 22 Sep 2026 · cloud.google.com
Security and compliance
Google Cloud states that its compliance offerings include ISO/IEC 27001/27017/27018/27701, SOC 1/2/3, PCI DSS, FedRAMP, GDPR alignment, and HIPAA alignment.Read 28 Sep 2026 · cloud.google.com
Threat intelligence integration
Cloud NGFW can block traffic using curated malicious IP and domain lists aggregated from Google, third-party, and open-source feeds.Read 28 Sep 2026 · cloud.google.com
Threat prevention
Cloud NGFW Enterprise provides an intrusion detection and prevention service powered by Palo Alto Networks that protects against malware, spyware, and command-and-control attacks.Read 28 Sep 2026 · cloud.google.com
TLS inspection
Cloud NGFW supports TLS interception and decryption for inspecting selected encrypted inbound, outbound, and internal Google Cloud traffic.Read 28 Sep 2026 · docs.cloud.google.com

Plans and prices

Free usage tier Free Monthly free usage limits 6 active secret versions · 10,000 access operations · 3 rotation notifications Read 22 Sep 2026 · cloud.google.com
Cloud NGFW Standard $0.02 a month FQDN objects · Threat intelligence · Geolocation objects · North-south traffic processing Read 22 Sep 2026 · cloud.google.com
Active secret versions $0.06 a month Billed per version per location Charged for active secret versions Read 22 Sep 2026 · cloud.google.com
Cloud NGFW Enterprise $0.02 a month Also charged $1.75 per hour for each deployed firewall endpoint Layer 7 security features · Intrusion detection and prevention · URL filtering · TLS inspection · Firewall endpoint deployment costs $1.75 per hour Read 22 Sep 2026 · cloud.google.com
Access operations $0.03 a month Billed per 10,000 operations Charged for access operations Read 22 Sep 2026 · cloud.google.com
Rotation notifications $0.05 a month Billed for each rotation notification Charged for rotation notifications sent to Pub/Sub Read 22 Sep 2026 · cloud.google.com
Cloud NGFW Essentials Free standard network attributes including IP ranges, ports, and protocols Read 28 Sep 2026 · cloud.google.com
Cloud NGFW Standard $0.02 a month metered by data processed Google Cloud Threat Intelligence · FQDN objects · geolocation filtering Read 28 Sep 2026 · cloud.google.com
Firewall Insights overgranting analysis $0.20 a month per million log entries 1-10,000 million log entries Read 28 Sep 2026 · cloud.google.com
Firewall Insights configuration analysis $1 a month per rule configuration analysis Read 28 Sep 2026 · cloud.google.com
Hierarchical Firewall Policies $11.51 a month per VM covered 500 or fewer attributes · 501 or more attributes Read 28 Sep 2026 · cloud.google.com
Cloud NGFW Enterprise Price not published metered by inspected data and endpoint deployment hours IDPS · TLS decryption Read 28 Sep 2026 · cloud.google.com

Every Google Cloud NGFW plan and price →

Where Specifiction places it

Alternatives to Google Cloud NGFWAll alternatives →