Skip to content

2️⃣ Azure Firewall

🔹 Definition

Image

Azure Firewall is a managed, stateful, Layer 7 firewall.

  • Central traffic inspection
  • Application & network rules
  • Used in Hub-Spoke architectures

When to use

  • Enterprise security
  • Full traffic control
  • Regulatory compliance

🔧 Azure CLI (Basic)

az network firewall create \
  --resource-group rg-vnet-demo \
  --name az-firewall \
  --vnet-name vnet-hub

Create rule:

az network firewall network-rule create \
  --resource-group rg-vnet-demo \
  --firewall-name az-firewall \
  --collection-name allow-web \
  --name allow-http \
  --protocols TCP \
  --destination-ports 80 443 \
  --action Allow \
  --priority 100

🖥️ Azure Portal Flow

Portal → Azure Firewall → Create
→ Hub VNet
→ Add Rule Collection
→ Update Route Tables

📦 Example

Spoke Subnet → Route Table → Firewall → Internet

✔ Central inspection ✔ Logging & threat intel