Question

A security engineer at your company runs a monthly review of firewall posture across a production VPC. She wants Google Cloud to automatically surface allow rules that permit a much broader IP range or port set than the traffic actually observed hitting those rules, so she can tighten them. Which Network Intelligence Center capability should she use to obtain these specific findings?

Accepted Answer

Firewall Insights overly permissive rule analysis, which relies on firewall metrics and logging data

Answer

Connectivity Tests configured against each firewall rule to validate reachability

Answer

Network Topology to visualize traffic volume between hierarchical firewall policies

Answer

VPC Flow Logs metadata annotations exported to BigQuery for manual query