This page describes how to troubleshoot common issues with Firewall Insights.
You do not see insights
In general, if you do not see insights, you should review the Enable APIs and features page and ensure that you didn't miss an essential setup step. The following sections describe specific cases in more detail.
You're not seeing insights about overly permissive rules or deny rules
If you can't see any insights about overly permissive rules or deny rules,
you might need to do one of the following:
- Enable the Firewall Insights API
- Enable Firewall Rules Logging
- Enable overly permissive rule insights
You're not seeing any shadowed firewall rules
If you're unable to see any shadowed firewall rules, you might need to do one of the following:
You must enable the Firewall Insights API because it allows the Firewall Insights service to check the settings of your network, firewall, and virtual machine (VM) instances.
You're not seeing metrics
In some cases, you might be unable to see Firewall Insights metrics. In this case, you might need to do one of the following:
Machine learning predictions don't appear
After you have enabled overly permissive insights, the machine learning model training and deployment take a few days. Therefore, it might take up to a week for predictions to be available.
Firewall Insights still doesn't work
After you use all of the preceding solutions and still don't see firewall usage metrics or insights in your projects, make sure that you have permission to use Firewall Insights.
If you still have issues, contact Support. They will contact the Firewall Insights team to help resolve your issue.