MEDIUM

Ensure firewall rules are logged

Firewall rule logging should be enabled for security monitoring.

Security Impact

Without firewall logs, blocked and allowed connections cannot be audited.

How to Remediate

Enable logging on firewall rules. Configure log sink for analysis.

Affected Resources

compute.googleapis.com/Firewall

Compliance Frameworks

SOC 2PCI-DSSHIPAA

How TigerGate Helps

TigerGate continuously monitors your GCP environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Google Cloud VPC resources across your GCP projects every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2, PCI-DSS, HIPAA compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
gcp-networking-10
Service
Google Cloud VPC
Category
Logging
Severity
MEDIUM

Automate This Check

TigerGate automatically scans your GCP environment for this and 79+ other security checks.

Start Free Trial

Related Google Cloud VPC Checks

View all checks
gcp-networking-1medium

Ensure default VPC network is not used

gcp-networking-2high

Ensure legacy networks do not exist

gcp-networking-3critical

Ensure firewall rules do not allow unrestricted SSH access

gcp-networking-4critical

Ensure firewall rules do not allow unrestricted RDP access

gcp-networking-5medium

Ensure VPC flow logs are enabled