Hands-On Cloud Administration in Azure

Configuring Azure Firewall

Under Rules in the Azure Firewall blade, we have three options: NAT rule collection, Network rule collection, and Application rule collection. Depending on what we want to achieve, we can use NAT rules to rewrite the source address. We can use network rules to define traffic from what source is allowed to go to what target, or with application rules we can define FQDNs that are allowed or denied. An example of the Rules blade in Azure Firewall is shown here:

Let's create a rule that will allow for traffic from the default subnet to VSTS. First, we need to provide a Name, Priority, and Action (Allow or Deny). Then ...