Dave_Roth : While I appreciate your speedy reply, I am still unclear on if there was an additional communication or not. I am unable to find a change announcement for the FrontDoor service tag either. I regularly get e-mails regarding changes in Azure and I'd like to make sure I'm getting all relevant notifications to changes that may impact my environment. Had I not stumbled upon this post I would have not had any notification until systems stopped receiving updates in July. Was there additional communication, or no?
Also, what guidance is there for the use case of an NSG without an Azure Firewall? After re-reading, I see that this post is specific to the Azure Firewall service, but service tags are applicable to both NSGs and Firewalls. Are the only options configuring WSUS or doing a complete redesign behind a firewall and removing the majority of the NSG rules?