Blog Post

Azure Networking Blog
4 MIN READ

Secure your subnet via private subnet and explicit outbound methods

brianlehr's avatar
brianlehr
Icon for Microsoft rankMicrosoft
Nov 16, 2023
This article was co-authored by aimeelittleton and brianlehr  While there are multiple methods for obtaining explicit outbound connectivity to the internet from your virtual machines on Azure, the...
Updated Nov 16, 2023
Version 3.0
virtual network
eenchev's avatar
eenchev
Copper Contributor
Oct 01, 2024

Hello,

What is the solution in case you need a static Public IP for a specific VM behind Azure Firewall? A dedicated IP for inbound and outbound connectivity only for 1 host; Multiple PIPs can be added to Azure firewall but they cannot be reserved or dedicated for specific internal IP addresses. Is the only solution to use a third party firewall appliance? NAT gateway also does not help in this scenario. Doing a full port range DNAT rule for 1 internal ip address (1:1) seems also not possible.