View Network Policies

This topic describes how to access and navigate the Network Policies page, review the policies detected in your security controls, and filter results to target specific entities.

Network Policies page

To open the Network Policies page, click the Network Policies icon on the left. By default, the page opens with All Entities selected and displays an overview of all your vendors and policy types.

Network policies

View network policies

Click on an entity in the Navigation Tree to see a list of matching policies on the right.

AWS policies include two tabs: AWS SG Policies and AWS Firewall Policies.

The AWS SGs Policies tab displays all the AWS security groups under the entity selected in the tree.
The AWS Firewall Policies tab displays the AWS Network Firewall Policies under the entity selected in the tree.

Azure policies include two tabs: Azure NSG Policies and Azure Firewall Policies.

The Azure NSGs policies tab is disabled for Virtual Hubs because Virtual Hubs cannot have NSG policies.
The Azure Firewall policies tab (which displays Azure Native Firewalls) is disabled when the Azure VNet does not have a firewall.

Azure Firewall (classic) has its own entry in the Navigation Tree.

Google Cloud Firewall policies include two tabs:

Firewall Policies tab: Shows VPC Firewall and Network Firewall policy rules, as well as hierarchical rules from the Hierarchical Policies tab that are used by the VPC Firewall.

Note: All policies that impact the VPC are ordered in the list based on how traffic inspects the rule as it enters or exits the VPC.
Hierarchical Policies tab: Shows organization-level and folder-level firewall policies.

Search

In the Search box above the list of policies, you can filter the displayed policies based on search entries.

For each type of security control, you can perform a search using partial or whole names based on the entities displayed in the tab.

Security Control	Searchable values
AWS SG	SG name
AWS Network Firewall	Policy name
Azure NSG	NSG name
Azure Native Firewall	Policy name
Azure Firewall (classic)	Policy name
Google Cloud Firewall	Project name or VPC name
Google Cloud Hierarchical Firewall	Policy name

Filter displayed policies

You can filter displayed policies to see a more targeted display of the policies that interest you.

Each security control type has its own unique set of filters which you can use to refine the policies displayed.

Security Control Type	Available Filters
AWS SG	Accounts Regions VPCs Risks severity Cleanup view (View and manage unused rules. See Clean Up Policies.) Show risks (toggle) - Show / hide risk information
AWS Network Firewall	Accounts Regions VPCs
Azure NSG	Subscriptions Regions VNets Risks severity Cleanup view (View and manage unused rules. See Clean Up Policies.) Show risks (toggle) - Show / hide risk information
Azure Native Firewall	Subscriptions Regions VNets Risks severity Cleanup view (View and manage unused rules. See Clean Up Policies.) Show risks (toggle) - Show / hide risk information
Azure Firewall (classic)	Subscriptions Regions VNets Risks severity Show risks (toggle) - Show / hide risk information
Google Cloud	Projects VPCs Tip: Hover over a VPC in the dropdown to see a tooltip showing the project name, the project ID defined on the Google Cloud, and its VPC name. This is especially helpful when there are multiple VPCs with the same name. Regions Risks severity Show risks (toggle) - Show / hide risk information Show hierarchical rules (toggle) When activated (default), hierarchical rules used by the firewall are displayed above the firewall rules When disabled, only the firewall rules are shown