Google Cloud NGFW
The facts below are what the maker publishes about Google Cloud NGFW, checked and dated. Our editors have not written about it yet.
Plans and prices
From Google Cloud NGFW's own pricing page, checked 22 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free usage tier | Free | 6 active secret versions · 10,000 access operations · 3 rotation notifications · Monthly free usage limits |
| Active secret versions | $0.06 a month | Charged for active secret versions · Billed per version per location |
| Access operations | $0.03 a month | Charged for access operations · Billed per 10,000 operations |
| Rotation notifications | $0.05 a month | Charged for rotation notifications sent to Pub/Sub · Billed for each rotation notification |
| Cloud NGFW Essentials | Free | standard network attributes including IP ranges, ports, and protocols |
| Cloud NGFW Standard | $0.02 a month | Google Cloud Threat Intelligence · FQDN objects · geolocation filtering · metered by data processed |
| Firewall Insights overgranting analysis | $0.20 a month | 1-10,000 million log entries · per million log entries |
| Firewall Insights configuration analysis | $1 a month | configuration analysis · per rule |
| Hierarchical Firewall Policies | $11.51 a month | 500 or fewer attributes · 501 or more attributes · per VM covered |
| Cloud NGFW Enterprise | — | IDPS · TLS decryption · metered by inspected data and endpoint deployment hours |
The facts
Each one read from Google Cloud NGFW's own pages, with the date it was checked.
What it does
- Automation interfaces
- Google Cloud documents APIs and the gcloud CLI for Cloud NGFW and provides Terraform guidance for hierarchical firewall policy configuration.checked 28 Sep 2026
- Central management
- Yeschecked 22 Sep 2026
- Data protection
- Google Cloud states that it encrypts data in transit between its facilities and at rest, with access to encryption keys limited to authorized roles and services with audited access.checked 28 Sep 2026
- Distributed inspection
- Cloud NGFW uses a fully distributed, stateful inspection firewall engine built into Google Cloud's software-defined networking fabric and enforced at each workload.checked 28 Sep 2026
- Documentation and support
- Cloud NGFW documentation provides quickstarts, guides, references, troubleshooting help, quotas and limits, billing questions, training, and code samples.checked 28 Sep 2026
- Domain filtering
- FQDN-based objects filter traffic by domain even when the underlying IP addresses change.checked 28 Sep 2026
- Dynamic policy objects
- Google Cloud Threat Intelligence lists, FQDN objects, and geolocation objects are curated by Google, constantly updated, and automatically applied in firewall rules that call them.checked 28 Sep 2026
- Endpoint limits
- Firewall endpoints support a maximum of 250 Mbps per connection with TLS inspection and 1.25 Gbps without TLS inspection.checked 28 Sep 2026
- Intended workloads
- Cloud NGFW is designed to protect Google Cloud workloads against external threats from the internet and internal threats within the network.checked 28 Sep 2026
- Micro-segmentation
- IAM-governed tags provide granular control over north-south and east-west traffic down to a single VM across VPCs and organizations.checked 28 Sep 2026
- Outbound control
- advancedchecked 22 Sep 2026
- Policy hierarchy
- Network firewall policies are global by default, apply to all regions, and can be defined at organization, folder, and project levels with hierarchical firewall policies.checked 28 Sep 2026
- Rule direction
- bothchecked 22 Sep 2026
- Security and compliance
- Google Cloud states that its compliance offerings include ISO/IEC 27001/27017/27018/27701, SOC 1/2/3, PCI DSS, FedRAMP, GDPR alignment, and HIPAA alignment.checked 28 Sep 2026
- Threat intelligence integration
- Cloud NGFW can block traffic using curated malicious IP and domain lists aggregated from Google, third-party, and open-source feeds.checked 28 Sep 2026
- Threat prevention
- Cloud NGFW Enterprise provides an intrusion detection and prevention service powered by Palo Alto Networks that protects against malware, spyware, and command-and-control attacks.checked 28 Sep 2026
- TLS inspection
- Cloud NGFW supports TLS interception and decryption for inspecting selected encrypted inbound, outbound, and internal Google Cloud traffic.checked 28 Sep 2026
Money
- Free plan
- Yeschecked 22 Sep 2026
Where it runs
- Supported platforms
- web,apichecked 22 Sep 2026
Alternatives to Google Cloud NGFW
- 1
OPNsense
Free planOpen sourceAndroidiOSWebAPI9.4Free plan - 2
CrowdSec
Free planOpen sourceiOSWebAPIExtension9.0From $49 a month - 3
IPFire
Free planOpen sourceWebAPILinuxSelf-hosted8.7From $1,099 a year ($91.58 a month) - 4
Comodo Internet Security
AndroidiOSExtensionWindows8.5 - 5
GlassWire
Free planAndroidWebWindows8.4From $2.99 a month - 6
NethSecurity
Free planOpen sourceWebAPILinuxSelf-hosted8.4From €150 a year (€12.50 a month)