Forum Discussion
Do I need a Firewall and WAF for Website HTTPS traffic only
Hi Abhishek,
Yes that was my thinking as well, however one my clients seems determined to add FW into the mix as well. Perhaps once I tell them how much it will cost, they may change their minds.
So it sounds like neither you nor Darrick see the need for additional FW?
After more research, I understand the differences between Azure Firewall and NSGs: I wrongly assumed they were one in the same.
NSGs are good for network layer traffic filtering to resources within VNETs in each subscription.
A firewall is stateful and provides centralized service that can be applied to both network and application layer protection across subscriptions and networks: https://docs.microsoft.com/en-us/azure/firewall/firewall-faq
The Azure Firewall complements NSGs, providing defense-in-depth protection.
Question: Does your web service warrant the more granular protections provided by Azure Firewall?
https://docs.microsoft.com/en-us/azure/firewall/firewall-faq