thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Azure Firewall

Azure managed, stateful firewall-as-a-service for filtering network and application traffic across virtual networks.

Definition

Azure Firewall offers Basic, Standard and Premium SKUs, with DNAT, network and application (FQDN) rules, threat intelligence filtering, and in Premium, TLS inspection, IDPS and URL filtering. It is usually deployed in a hub VNet (AzureFirewallSubnet) or secured Virtual WAN hub with UDRs forcing spoke traffic through it, and centrally managed with Firewall Manager policies.

Example

An application rule allows VMs to reach only *.windowsupdate.com and the company's package repository.

Exam tip

NSGs filter by IP and port at subnet/NIC level; Azure Firewall adds centralized FQDN filtering, threat intelligence and logging.

Related terms