In my environment I'm using Azure Bastion to manage my win-vm-1 virtual machine. Take a look at Figure 1, which illustrates my lab environment:įigure 1. The idea here is you don't have to worry about network security group (NSG) filters or pay the extra license costs associated with a third-party network virtual appliance.

Azure Firewall ArchitectureĪzure Firewall is a Microsoft-managed network virtual appliance that provides stateful packet inspection, high availability, and cloud scalability. Now, it's true you can do all of the above by deploying a third-party network virtual appliance into your hub VNet.

Minimize the network security groups (NSG) you must manage in your environment.

Log and report upon actual or potential security/threat intelligence issues.

Centrally control ingress and egress traffic across virtual networks and Azure subscriptions by using policies.

Specifically, your requirements mandate you: Let's say you need to secure network traffic into your company's Azure virtual network. Call it firewall-as-a-service if you'd like. In today's tutorial, I'll teach you how to get started with Azure Firewall, Microsoft's cloud-native managed firewall appliance.

Azure firewall