Azure Firewall

In the Ultra Transcenders books

AZ-305AZ-104AZ-700SC-500AI-300AI-103SC-900ALZ

Each book explains Azure Firewall in context, with comparison tables and the common traps.

Terms in this definition

• Virtual WAN

  A networking service built around hubs that Microsoft manages. The Basic type handles only site-to-site VPN; Standard brings in ExpressRoute, point-to-site and full transit.

Related terms

• Application rule

  Azure Firewall rule type that controls outbound HTTP, HTTPS and MSSQL traffic according to the destination FQDN, with full URL filtering requiring Premium. DNAT and network rules are evaluated before it.

• AZFWNetworkRule

  When Azure Firewall logs in resource-specific mode, entries produced by its network rules land in this Log Analytics table.

• AZFWThreatIntel

  Log Analytics table, in resource-specific mode, where Azure Firewall writes events raised by threat intelligence.

• Azure Firewall Manager

  Service for administering Azure Firewall policies centrally, letting child policies inherit from a parent across subscriptions and regions.

• Azure Firewall Premium

  Top Azure Firewall SKU, which builds on Standard with IDPS, TLS inspection, URL filtering and web categories; using those features requires a firewall policy on the Premium tier.

• Azure Firewall Standard

  Mid-level Azure Firewall SKU: it filters with application and network rules, can block known-bad addresses using threat intelligence and acts as a DNS proxy. Inspecting TLS traffic and IDPS are Premium-only.

• AzureDiagnostics

  Log Analytics table shared by many services, receiving Azure resource logs from diagnostic settings that use the legacy Azure diagnostics mode, Azure Firewall logs being one example. Guest operating system logs don't go here.

• AzureFirewallManagementSubnet

  Subnet (minimum /26) set aside for the management NIC of Azure Firewall; that NIC must have a public IP address of its own and a default route to the internet.