In this module, you learn how to create and use hierarchical firewall policies to set baseline firewall rules.

Getting Started

Hierarchical firewall policies.

Quiz — Question 1

Quiz — Question 2

Quiz — Question 3

Hierarchical Firewall Policies

In this module, you learn how to create and use global and regional network firewall policies to refine your firewall at the VPC network and subnet level

Network firewall policies

Quiz — Question 4

Network Firewall Policies

In this module, you learn how to scope firewall policies using address groups and Tags (also known as secure tags.)

Address groups

Secure Cloud Workloads with Cloud NGFW

Scoping Firewall Rules

In this module you learn how to proactively detect and prevent threats hidden in encrypted traffic from entering your VPC networks.

Intrusion detection and prevention service

Quiz — Question 5

Intrusion Detection and Prevention Service

In this module you learn about how to ensure your firewall is working optimally, using Firewall Insights and well as recommended principles and tips.

Firewall Insights

Recommended guidelines

Best Practices

In this module, you take what you learned to protect a multi-tier application using firewall policies.

Protect a multi-tier application

What did I walk away with?

Putting It All Together

This training course, the third course in the Configure Next Generation Firewall Series, shows you how to secure your VPC infrastructure using Cloud Next Generation Firewall (NGFW). Learn how to implement hierarchical and network policies, scope firewall rules, and configure intrusion detection and prevention to counter threats.

<h2>Protect Workloads With Cloud NGFW</h2>Modern applications need more than basic allow and deny rules. This intermediate course shows you how to secure your VPC infrastructure with Cloud Next Generation Firewall (NGFW). It’s designed for network, security, and cloud engineers and cloud architects who have completed the Networking in Google Cloud series or have equivalent experience.<br><br><h2>Build Layered Firewall Policies</h2>You’ll create hierarchical firewall policies to set baseline rules across your organization, then refine them with global and regional network firewall policies at the VPC network and subnet level. You’ll also learn to scope rules precisely using address groups and secure tags.<br><br><h2>Stop Threats and Validate Your Rules</h2>Next, you’ll configure the intrusion prevention service to block threats before they reach your workloads, including threats hidden in encrypted traffic. You’ll use Firewall Insights to confirm your policies are working as intended, then apply everything you’ve learned to protect a multi-tier application. By the end, you’ll be able to design, implement, and assess a Cloud NGFW strategy.

Networking in Google Cloud: Fundamentals

Networking in Google Cloud: Network Security

Secure VPC networks with Cloud NGFW: firewall policies, secure tags, intrusion prevention, and Firewall Insights.

Secure Cloud Workloads with Cloud NGFW

Implement Cloud Next Generation Firewall

Exercise instructions