Create security profile groups

Security profile groups are containers for security profiles. They let you bundle security profile types together for easier management and application to firewall rules. You can create these groups at either the organization or project level.

Each security profile group can contain up to one security profile of each of the following types:

  • THREAT_PREVENTION
  • WILDFIRE_ANALYSIS (Preview)
  • URL_FILTERING

To apply consistent network security policies across your Google Cloud environment, you can use security profile groups to combine and apply threat prevention, Advanced malware sandbox (WildFire), and URL filtering profiles. By grouping these profiles, you can enforce multiple security checks such as threat prevention, Advanced malware sandbox, and URL filtering on network traffic through a single firewall policy rule, ensuring consistent policy enforcement and simplified management.

This document is intended for network administrators and security engineers who configure network security and firewall policies.

Before you begin, review the concepts in the Security profile groups overview.

Before you begin

  • You must enable the Network Security API in your project.

  • To run the gcloud command-line examples in this guide, install the gcloud CLI.

  • Create the security profiles that you need to add to the security profile group.

Roles

To get the permissions that you need to create security profile groups, ask your administrator to grant you the necessary Identity and Access Management (IAM) roles on your organization or project. For more information about granting roles, see Manage access.

Create a security profile group

Create a security profile group to bundle one or more security profiles into one resource for easier management and application to firewall rules.

Each security profile group can contain up to one security profile of each of the following types:

  • THREAT_PREVENTION