Friday, 25 March 2022

Azure Firewall

 

  • A service that uses a static public IP address to protect your VNet resources.
  • Azure Firewall is PCI, SOC, ISO, ICSA Labs, and HITRUST compliant.

azure firewall

Features

  • A stateful firewall service.
  • You can enable forced tunneling to route Internet-bound traffic to an additional firewall or virtual network appliance.
  • Limit outbound traffic to a given FQDN list, including wild cards.
    • Filter any TCP/UDP protocol outbound traffic.
    • To use FQDNs in your rules, you must enable DNS proxy.
  • Deny the traffic of a malicious IP address with threat intelligence-based filtering.
    • It has the highest priority rules and will always be processed first.
    • Threat intelligence modes: Off, Alert only, Alert and deny
  • With a DNS proxy, a firewall listens to port 53 and forwards the DNS requests to a DNS server.
  • You can minimize the complexity of creating a security rule using a service tag.
  • Associate up to 250 public IP addresses in your firewall.
  • It supports SNAT and DNAT translation.
    • SNAT – Source NAT for outbound VNet traffic.
    • DNAT – Destination NAT for inbound network traffic.
  • Azure Firewall diagnostic logs (JSON format):
    • Application rule log
    • Network rule log
  • You can store all your logs in a storage account, event hubs, and Azure monitor logs.
  • Azure Firewall metrics:
    • Application/Network rules hit count
    • Data processed
    • Throughput
    • Firewall health state
    • SNAT port utilization
  • To manage multiple firewalls, you can use Azure Firewall Manager.
  • Protect your VDI deployments using Azure firewall DNAT rules and threat Intelligence filtering.

Pricing

  • You are charged for each firewall deployment
  • You are charged for any data processed by your firewall

No comments:

Post a Comment