Cloud NGFW: Project-level resources and Envoy proxy protection

You can now create and configure project-level resources for application layer inspection in Cloud NGFW, including project-level firewall endpoints, security profile groups, and security profiles. For more information, see Organization-level and project-level resources , Firewall endpoints overview , Security profile groups overview , and Security profiles overview . This feature is available in General Availability .

To restrict traffic to the managed Envoy proxies in a proxy-only subnet , you can configure global network firewall policies and regional network firewall policies to protect internal Application Load Balancers and internal proxy Network Load Balancers. For more information, see Use global network firewall policies to protect Envoy-based load balancers and Use regional network firewall policies to protect internal Application Load Balancers and internal proxy Network Load Balancers . This feature is available in General Availability .