Stay organized with collections
Save and categorize content based on your preferences.
This page describes how to troubleshoot common issues with Firewall Insights.
You do not see insights
In general, if you do not see insights, you should review the
Enable APIs and features
page and ensure that you didn't miss an essential setup step. The following
sections describe specific cases in more detail.
You're not seeing insights about overly permissive rules or deny rules
If you can't see any insights about overly permissive rules or deny rules,
you might need to do one of the following:
You must enable the Firewall Insights API because it allows the
Firewall Insights service to check the settings of your network,
firewall, and virtual machine (VM) instances.
You're not seeing metrics
In some cases, you might be unable to see Firewall Insights
metrics. In this case, you might need to do one of the following:
After you have enabled overly permissive insights, the machine learning model
training and deployment take a few days. Therefore, it might take up to a week
for predictions to be available.
Firewall Insights still doesn't work
After you use all of the preceding solutions and still don't see firewall
usage metrics or insights in your projects, make sure that you have permission
to use Firewall Insights.
If you still have issues, contact
Support.
They will contact the Firewall Insights team to help resolve your issue.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[],[],null,["# Troubleshoot Firewall Insights\n\nThis page describes how to troubleshoot common issues with Firewall Insights.\n\nYou do not see insights\n-----------------------\n\nIn general, if you do not see insights, you should review the\n[Enable APIs and features](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features)\npage and ensure that you didn't miss an essential setup step. The following\nsections describe specific cases in more detail.\n\n### You're not seeing insights about overly permissive rules or `deny` rules\n\nIf you can't see any insights about overly permissive rules or `deny` rules,\nyou might need to do one of the following:\n\n- [Enable the Firewall Insights API](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features#enabling-api)\n- [Enable Firewall Rules Logging](/vpc/docs/using-firewall-rules-logging#enable)\n- [Enable overly permissive rule insights](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features#enabling-insights)\n\n### You're not seeing any shadowed firewall rules\n\nIf you're unable to see any shadowed firewall rules, you might need to do one\nof the following:\n\n- [Enable the Firewall Insights API](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features#enabling-api)\n- [Enable shadowed rule insights](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features#enabling-insights)\n\nYou must enable the Firewall Insights API because it allows the\nFirewall Insights service to check the settings of your network,\nfirewall, and virtual machine (VM) instances.\n\n### You're not seeing metrics\n\nIn some cases, you might be unable to see Firewall Insights\nmetrics. In this case, you might need to do one of the following:\n\n- [Enable the Firewall Insights API](/network-intelligence-center/docs/firewall-insights/how-to/enable-api-features#enabling-api)\n- [Enable Firewall Rules Logging](/vpc/docs/using-firewall-rules-logging#enable)\n\nMachine learning predictions don't appear\n-----------------------------------------\n\nAfter you have enabled overly permissive insights, the machine learning model\ntraining and deployment take a few days. Therefore, it might take up to a week\nfor predictions to be available.\n\nFirewall Insights still doesn't work\n------------------------------------\n\nAfter you use all of the preceding solutions and still don't see firewall\nusage metrics or insights in your projects, make sure that you have permission\nto use Firewall Insights.\n\nIf you still have issues, contact\n[Support](/network-intelligence-center/docs/firewall-insights/support/getting-support).\nThey will contact the Firewall Insights team to help resolve your issue."]]