About the Google Network Security Integration
Google Network Security connects Synqly to Google Cloud VPC flow logs, giving security teams visibility into network traffic across Google Cloud environments without standing up custom log pipelines. VPC flow logs record accepted and denied traffic at the instance and subnet level, making them a key source for detecting lateral movement, data exfiltration, and misconfigured network paths in cloud infrastructure. Part of Synqly’s Network Security Unified API, the Google Network Security integration lets security platforms query traffic events and traffic log configurations, normalized to OCSF Network Activity, through a single standardized connector instead of building direct Google Cloud API integrations.
Integration Use Cases
Query Firewall Rules
Returns the firewall rules that control traffic within the integration's scope. Built-in default rules that the provider's API does not
report are not included. A rule that applies to several networks is returned once per network
Query Traffic Events
Returns traffic events from traffic log configurations on the integration. Results are normalized to OCSF Network Activity (class_uid 4001).
Query Traffic Log Configurations
Returns traffic log configurations discovered for the integration.
