Feature

You can now create and configure the following organization-level Cloud NGFW resources within a Google Cloud project:

• Security profiles
• Security profile groups
• Firewall endpoints
• Firewall endpoint associations

For more information, see Security profile overview, Security profile group overview, and Firewall endpoint overview. This feature is available in Public preview.

Feature

Secure tags with a purpose-data attribute specifying a VPC network or an organization now support VPC networks that are connected using VPC Network Peering. For more information, see Secure tags for firewalls. This feature is available in General Availability.

Feature

You can use network contexts to meet your security goals by using fewer firewall policy rules more efficiently. For more information, see Network contexts. This feature is available in General Availability.

Feature

Cloud NGFW now supports regional system firewall policies. Regional system firewall policies are read-only policies that internal Google services, such as Google Kubernetes Engine, use to secure their operations within a VPC network. For more information, see Regional system firewall policies. This feature is available in General Availability.

Feature

You can create a Remote Direct Memory Access (RDMA) over converged ethernet (RoCE) Virtual Private Cloud (VPC) network and configure firewall rules that apply to the network. For more information, see Cloud NGFW for RoCE VPC networks. This feature is available in General Availability.

Feature

You can create a firewall endpoint that supports jumbo frames up to 8,500 bytes in size. For more information, see Supported packet size. This feature is available in General Availability.

Feature

You can create a Remote Direct Memory Access (RDMA) over converged ethernet (RoCE) Virtual Private Cloud (VPC) network and configure firewall rules that apply to the network. For more information, see Cloud NGFW for RoCE VPC networks. This feature is available in Preview.

Feature

You can create a secure tag at the organization level and bind its value to all virtual machine (VM) instances across that organization, instead of applying tags to instances within a specific network. For more information, see Secure tags for firewalls. This feature is available in Preview.

Feature

You can use a single request to batch update all the firewall policy rules for hierarchical and network firewall policies. For more information, see Overview of batch update to firewall policy rules. This feature is available in General Availability.

Feature

You can use network contexts to meet your security goals by using fewer firewall policy rules more efficiently. This feature is available in Preview. For more information, see Network contexts.