---
title: Google Cloud Firewall Insights
description: >-
  Track firewall rule hit counts and usage across your Google Cloud VPC
  networks.
breadcrumbs: Docs > Integrations > Google Cloud Firewall Insights
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Google Cloud Firewall Insights
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

[Firewall Insights](https://cloud.google.com/network-intelligence-center/docs/firewall-insights/concepts/overview) is a component of Network Intelligence Center that analyzes VPC firewall rule usage, reporting which rules are being hit and which are shadowed or unused.

Use the Datadog Google Cloud Platform integration to collect firewall rule hit counts and last-used timestamps at the subnet and VM level, helping you identify overly permissive or redundant firewall rules across your Google Cloud environment.

## Setup{% #setup %}

### Installation{% #installation %}

If you haven't already, set up the [Google Cloud Platform integration](https://docs.datadoghq.com/integrations/google-cloud-platform.md) first. Then verify that the `Network Management API` is enabled in your Google Cloud project and that Firewall Insights is enabled for the VPC networks you want to monitor.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **gcp.firewallinsights.subnet.all.firewall_hit_count**(count)            | The hit count of various firewalls for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                                                          |
| **gcp.firewallinsights.subnet.all.firewall_last_used_timestamp**(gauge) | The epoch timestamp (in seconds) of the last time a firewall was used for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                       |
| **gcp.firewallinsights.subnet.firewall_hit_count**(count)                | The hit count of various firewalls for the traffic corresponding to a subnet. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                                    |
| **gcp.firewallinsights.subnet.firewall_last_used_timestamp**(gauge)     | The epoch timestamp (in seconds) of the last time a firewall was used for the traffic corresponding to a subnet. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on. |
| **gcp.firewallinsights.vm.all.firewall_hit_count**(count)                | The hit count of various firewalls for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                                                          |
| **gcp.firewallinsights.vm.all.firewall_last_used_timestamp**(gauge)     | The epoch timestamp (in seconds) of the last time a firewall was used for network traffic. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                       |
| **gcp.firewallinsights.vm.firewall_hit_count**(count)                    | The hit count of various firewalls for the traffic corresponding to a VM. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.                                        |
| **gcp.firewallinsights.vm.firewall_last_used_timestamp**(gauge)         | The epoch timestamp (in seconds) of the last time a firewall was used for the traffic corresponding to a VM. Please note that this metric applies only to firewalls for which Firewall Logging has been turned on.     |

### Events{% #events %}

The Google Cloud Firewall Insights integration does not include any events.

### Service Checks{% #service-checks %}

The Google Cloud Firewall Insights integration does not include any service checks.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).