On the card named Simplify firewall configuration, click
View all. The Recommendation Hub displays a page that
lists shadowed rules. The
Insight column for each rule provides a summary of why the rule was
identified as a shadowed rule.
To view more details about the shadowed rule and the rules that shadow it,
click the insight.
View overly permissive rule insights
To learn about these insights, see the following sections in
overly permissive rules
in Firewall Insights categories and states:
Allow rules with no hits
Allow rules with unused attributes
Allow rules with overly permissive IP address or port ranges
Console
In the Google Cloud console, go to the Recommendation Hub.
On the card named Review overly permissive firewall rules, click
View all.
To toggle between the insight types, use the tabs at the top of the page.
You can click the insight for any rule listed to understand why the rule
was included in the list. The insight detail shows more information about
the hit count and attributes for a rule.
Mark an insight as dismissed
If any insight isn't meaningful, or if you want to hide it for any other reason,
you can dismiss it. After you dismiss an insight, the Google Cloud console no
longer displays the insight to you or other users unless you restore it.
Console
In the Google Cloud console, go to the Recommendation Hub.
If you want to dismiss an insight about an overly permissive rule, use
the tabs at the top of the page to navigate to the appropriate insight
category.
Select the insights that you want to dismiss, and then click Dismiss.
In the confirmation dialog, click Yes, dismiss.
Restore a dismissed insight
If you dismissed an insight that you later think is relevant,
you or a user can restore it and make it visible in the Google Cloud console
by following these steps.
Console
In the Google Cloud console, go to the Recommendation Hub.
If you want to dismiss an insight about an overly permissive rule, use
the tabs at the top of the page to navigate to the appropriate insight
category.
At the top of the page, click History.
Click the Dismissed tab, which shows dismissed recommendations and
insights for the project.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-08 UTC."],[],[],null,["# View insights in Recommendation Hub dashboard\n\nThe Recommendation Hub is a feature of the Recommender\nproduct that provides usage recommendations for Google Cloud products and\nservices.\n\nThe Google Cloud console for the Recommendation Hub shows the\nfollowing firewall rule insights:\n\n- Shadowed firewall rules\n- Overly permissive rules\n\nFor general information about Recommendation Hub, see\n[Getting started with Recommendation Hub](/recommender/docs/recommendation-hub/identify-configuration-problems).\n\nWithin Recommendation Hub, the names of the cards\ndiffer from those used on the Firewall Insights page. For\ndetails, review the following sections.\n\nView shadowed firewall rules\n----------------------------\n\nTo learn about this insight, see\n[Shadowed rules](/network-intelligence-center/docs/firewall-insights/concepts/insights-categories-states#shadowed-firewall-rules)\nin *Firewall Insights categories and states*. \n\n### Console\n\n1. In the Google Cloud console, go to the **Recommendation Hub**.\n\n [Go to Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n2. On the card named **Simplify firewall configuration** , click\n **View all** . The Recommendation Hub displays a page that\n lists shadowed rules. The\n **Insight** column for each rule provides a summary of why the rule was\n identified as a shadowed rule.\n\n3. To view more details about the shadowed rule and the rules that shadow it,\n click the insight.\n\nView overly permissive rule insights\n------------------------------------\n\nTo learn about these insights, see the following sections in\n[overly permissive rules](/network-intelligence-center/docs/firewall-insights/concepts/insights-categories-states#overly-permissive-rules)\nin *Firewall Insights categories and states*:\n\n- Allow rules with no hits\n- Allow rules with unused attributes\n- Allow rules with overly permissive IP address or port ranges\n\n### Console\n\n1. In the Google Cloud console, go to the **Recommendation Hub**.\n\n [Go to Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n2. On the card named **Review overly permissive firewall rules** , click\n **View all**.\n\n3. To toggle between the insight types, use the tabs at the top of the page.\n\n You can click the insight for any rule listed to understand why the rule\n was included in the list. The insight detail shows more information about\n the hit count and attributes for a rule.\n\nMark an insight as dismissed\n----------------------------\n\nIf any insight isn't meaningful, or if you want to hide it for any other reason,\nyou can dismiss it. After you dismiss an insight, the Google Cloud console no\nlonger displays the insight to you or other users unless you restore it. \n\n### Console\n\n1. In the Google Cloud console, go to the **Recommendation Hub**.\n\n [Go to Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n2. Find the appropriate card and click **View all**.\n\n3. If you want to dismiss an insight about an overly permissive rule, use\n the tabs at the top of the page to navigate to the appropriate insight\n category.\n\n4. Select the insights that you want to dismiss, and then click **Dismiss**.\n\n5. In the confirmation dialog, click **Yes, dismiss**.\n\nRestore a dismissed insight\n---------------------------\n\nIf you dismissed an insight that you later think is relevant,\nyou or a user can restore it and make it visible in the Google Cloud console\nby following these steps. \n\n### Console\n\n1. In the Google Cloud console, go to the **Recommendation Hub**.\n\n [Go to Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n2. Find the appropriate card and click **View all**.\n\n3. If you want to dismiss an insight about an overly permissive rule, use\n the tabs at the top of the page to navigate to the appropriate insight\n category.\n\n4. At the top of the page, click **History**.\n\n5. Click the **Dismissed** tab, which shows dismissed recommendations and\n insights for the project.\n\n6. Select the insights that you want to restore.\n\n7. Click **Restore**.\n\n8. In the confirmation dialog, click **Restore**.\n\nWhat's next\n-----------\n\n- [View Firewall Insights metrics](/network-intelligence-center/docs/firewall-insights/how-to/view-metrics)"]]
