Azure Firewall
-
Azure firewall is a managed, cloud-based security services that protects your Azure VNET Resources. It is a fully stateful firewall as a service with buit-in high availability & unrestricted cloud scalability
-
Azure firewall operates on Layer 4 & Layer 7 on TCP/OSI Layers.
-
You can centrally create, enforce & log application & network connectivity policies across subscription s& virtual Networks
-
Features of Azure firewall
- Built-in high availability
- Avalilability Zones
- Unrestricted cloud scalability
- Application FQDN filtering rules
- Network traffic filtering rules
- FQDN tags
- Service Tags
- Threat intelligence
- Azure Monitor logging
- Certifications
- Force tunneling
Creating an Azure firewall
- Create a vnet with two subnets
- Create a vm in one of the subnets
Create a default route
- Navigate to All Services => Networking => Route Tables
- Select Add & Give a name firewall-router
- Select Subscribtion & Resource group
- Use the same location as your vnet and click create.
- Now open your route-table & associate with workload subnet (subnet in which your vm is running)
- Now Create a route b/w subnet and firewall
