Google Cloud Compliance ControlsGoogle Cloud VPC
Default firewall rules should prohibit ingress from 0.0.0.0/0 except HTTP and HTTPS
Ensures that default firewall rules do not allow ingress from 0.0.0.0/0 to any port. This is not applicable to the default HTTP and HTTPS firewall rule. Trivy GCP-0073 ensures that Google Cloud's default firewall rules are disabled.
What this control checks
Default firewall rules must not allow ingress from 0.0.0.0/0 to any port, except HTTP and HTTPS
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.DS-02
- PR.IR-01
Related controls
- Firewall rules should prohibit ingress from 0.0.0.0/0 to any port
- Firewall rules should prohibit unrestricted RDP access from the internet
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 9160
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 9090
- Firewall rules should prohibit ingress from 0.0.0.0/0 to Oracle DB port 1521
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_firewall_default_rule_restrict_ingress_access_except_http_and_https - Powerpipe Control:
gcp_compliance.control.compute_firewall_default_rule_restrict_ingress_access_except_http_and_https - Trivy Check:
GCP-0073
Last reviewed: 2026-10-09