Cloud Shield / Custom rules & firewall
Protection shaped around your application.
Different applications need different access controls. Use request conditions for application-specific decisions and IP firewall rules for client access, then review the effect of those controls through security analytics.
Capabilities
Custom rules & firewall in practice.
Request conditions
Build custom rules around the request attributes supported by Cloud Shield and choose the action for matching traffic.
IP firewall rules
Apply explicit access controls to client IPs and supported address ranges for each protected domain.
Precise exceptions
Use policy overrides to adjust how specific traffic is treated without broadly disabling a managed policy.
Configuration & visibility
Choose the control that matches the decision.
Keep application logic, client access and managed-policy exceptions clear as your rule set grows.
- Custom rules
- Match application requests to a set of conditions and configure the appropriate supported action.
- IP firewall
- Maintain explicit IP access rules for clients that need to be permitted or restricted.
- Policy overrides
- Refine the behavior of managed protection for requests that require an exception.
- Advanced Rules add-on
- Extend rule controls with the Advanced Rules add-on on Advanced or Business. It is priced separately from the base plan.
How it works
Create a rule with a clear purpose.
- 01
Inspect the traffic
Start from a security event or a known application requirement and identify the request or client you need to match.
- 02
Set conditions and action
Choose a custom rule, firewall rule or policy override and configure its scope carefully.
- 03
Check the outcome
Review subsequent security events and test legitimate traffic to confirm the change has the intended effect.
Advanced includes 5 custom rules and 5 IP firewall rules. Business includes 20 of each. Compare plans
Frequently asked questions
No. Advanced includes 5 custom rules and 5 IP firewall rules. Business includes 20 custom rules and 20 IP firewall rules.
Advanced Rules are a separate add-on available on Advanced and Business. Contact our team for add-on pricing and activation.
Open the protected domain in Cloud Shield in the Management Console. Rules, firewall controls and policy overrides are managed in the context of that application.
Explore Cloud Shield