Google Cloud Firewall Insights
To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.
To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.
Overview
Firewall Insights is a component of Network Intelligence Center that analyzes VPC firewall rule usage, reporting which rules are being hit and which are shadowed or unused.
Use the Datadog Google Cloud Platform integration to collect firewall rule hit counts and last-used timestamps at the subnet and VM level, helping you identify overly permissive or redundant firewall rules across your Google Cloud environment.
Setup
Installation
If you haven’t already, set up the Google Cloud Platform integration first. Then verify that the Network Management API is enabled in your Google Cloud project and that Firewall Insights is enabled for the VPC networks you want to monitor.
Data Collected
Metrics
| |
|---|
gcp.firewallinsights.subnet.all.firewall_hit_count
(count) | The hit count of various firewalls for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.subnet.all.firewall_last_used_timestamp
(gauge) | The epoch timestamp (in seconds) of the last time a firewall was used for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.subnet.firewall_hit_count
(count) | The hit count of various firewalls for the traffic corresponding to a subnet. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.subnet.firewall_last_used_timestamp
(gauge) | The epoch timestamp (in seconds) of the last time a firewall was used for the traffic corresponding to a subnet. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.vm.all.firewall_hit_count
(count) | The hit count of various firewalls for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.vm.all.firewall_last_used_timestamp
(gauge) | The epoch timestamp (in seconds) of the last time a firewall was used for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.vm.firewall_hit_count
(count) | The hit count of various firewalls for the traffic corresponding to a VM. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
gcp.firewallinsights.vm.firewall_last_used_timestamp
(gauge) | The epoch timestamp (in seconds) of the last time a firewall was used for the traffic corresponding to a VM. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
Events
The Google Cloud Firewall Insights integration does not include any events.
Service Checks
The Google Cloud Firewall Insights integration does not include any service checks.
Troubleshooting
Need help? Contact Datadog support.
