A firewall supports a maximum of three nested layers in a security group: parent security group, security group, and child security group.