Packet Filtering Options versus Packet Monitoring Options
All public clouds will provide a packet monitoring option in the way of flow logs (VPC Flow Logs)
However, packet monitoring is not the same as packet filtering.
The closest that GCP has is a service called Packet Mirroring which will allow you to dump traffic after the fact (after an incident has occured).
For true, live packet filtering, you need a custom security appliance - like a Palo Alto FW or a Cisco FW or a Fortinet FW appliance. These are available from all public cloud marketplaces.
Leave a Reply