7. Azure Firewall

Most Azure networking components used for security are there to stop unwanted incoming traffic. Whether we use network security groups, application security groups, or a Web Application Firewall (WAF), they all have one single purpose—to stop unwanted traffic from reaching our services. Azure Firewall has similar functionality, including one extension that we can use to stop outbound traffic from leaving the virtual network.

We will cover the following recipes in this chapter:

  • Creating a new firewall
  • Creating a new firewall with PowerShell
  • Configuring a new allow rule
  • Configuring a new deny rule
  • Configuring a route table
  • Enabling diagnostic logs for Azure Firewall
  • Configuring Azure Firewall in forced tunneling mode

Get Azure Networking Cookbook - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.