Top Azure Firewall SKU, which builds on Standard with IDPS, TLS inspection, URL filtering and web categories; using those features requires a firewall policy on the Premium tier.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Azure Firewall Premium in context, with comparison tables and the common traps.
Terms in this definition
- Azure Firewall
Stateful network firewall run by Azure as a managed service; it can be placed in Virtual WAN hubs and administered through Firewall Manager.
- SKU
The size or tier of a service, for example a VM size or the Premium tier of ACR.
- Standard deployment type
A Foundry deployment type billed per token that keeps processing of prompts and responses inside the Azure geography of the resource, meeting data residency needs at lower volumes.
- IDPS
Signature-based intrusion detection and prevention in Azure Firewall Premium, which raises alerts on or blocks harmful traffic. It only takes effect with a Premium policy attached.
- TLS inspection
With an intermediate CA certificate held in Key Vault, Azure Firewall Premium can decrypt outbound and east-west TLS traffic, inspect it and encrypt it again.
- URL filtering
With Azure Firewall Premium, application rules can filter on the complete URL path rather than just the FQDN as in Standard. Network rules don't offer it.
- Web categories
Destinations for Azure Firewall application rules such as social networking or gambling. Premium categorises using the full URL, Standard using only the FQDN.
- Document Intelligence add-on capabilities
Extra Document Intelligence options switched on with the features query parameter: barcodes, formulas, keyValuePairs, languages, ocrHighResolution, queryFields and styleFont.
Related terms
- Intermediate CA certificate
Used by Azure Firewall Premium to sign server certificates on the fly during TLS inspection, this CA certificate must be exportable and is kept as a Key Vault secret. A user-assigned managed identity gives the firewall access, and clients need to trust the root above it.