Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: SEP 26, 2023 | Ask-Me-Anything | Azure Firewall, Azure WAF and Azure DDoS TBohunek, please submit your feedback via https://aka.ms/azurenetsecfeedback. I would also recommend you joining the Private Community where you can make a difference in helping us shape our products together by reviewing our product roadmaps, co-design participation, feature previews and stay up to date on announcements. Re: SEP 26, 2023 | Ask-Me-Anything | Azure Firewall, Azure WAF and Azure DDoS joshuabales, yes you can create a custom rule on Azure Web Application Firewall using RemoteAddr (IP address) as your match variable as described here. Custom rules allow you to create your own rules that are evaluated for each request that passes through the WAF and hold a higher priority than the rest of the rules in the managed rule sets. The custom rules contain a rule name, rule priority, and an array of matching conditions. If these conditions are met, an action is taken (to allow, block, or log). If a custom rule is triggered, and an allow or block action is taken, no further custom or managed rules are evaluated. Custom rules can be enabled/disabled on demand. Re: SEP 26, 2023 | Ask-Me-Anything | Azure Firewall, Azure WAF and Azure DDoS Rahulggupta25, please find my comments below: 1.how we can backup our rules in firewall? Answer: Take a look at the following blog post describing the steps to backup your Azure Firewall. 2.whats best practice for north-south and east west traffic? Answer: Could you elaborate more? You can use the same Azure Firewall deployment to protect both north-south and east-west traffic. Check the recommendations at this Well-Architected Framework document for Azure Firewall. 3.do we need to have ELB in front of firewall? Answer: No, you don't need to create an ELB in front of Azure Firewall. Azure Firewall is high available by design. Re: SEP 26, 2023 | Ask-Me-Anything | Azure Firewall, Azure WAF and Azure DDoS RodrigoFerraz, Azure Firewall is a cloud-native resource. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. It is based off Virtual Machine Scale Set, and by default, there are two active VMSS instances. Azure Firewall gradually scales out when the average throughput or CPU consumption is at 60%, and it takes 5 to 7 minutes. The scale in also happens gradually when the average throughput or CPU consumption is below 20%. Note: The scaling doesn't apply to the Basic SKU, as it has a fixed scale unit to run the service on two virtual machine backend instances. Azure Firewall doesn't share connection state between the instances. So, in case of scale in a VM instance is put in drain mode for 90 seconds before being recycled. It may also happen when there's a planned maintenance of the Firewall. For reliability, we recommend deploying Azure Firewall with Availability Zones.
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagOptimize Azure Firewall logs with selective logging A common question from customers is whether Azure Firewall supports filtering or selecting which logs are sent to a Log Analytics workspace. This concern usually stems from the high cost of storing l...Maximizing savings with Azure Firewall and Azure Monitor basic table plan The Azure Firewall Product Team has recently announced support for the new Log Analytics Basic table plan for all resource-specific logging tables, offering a potential reduction in logging costs by ...Protecting the Public IPs of Secured Virtual Hub Azure Firewalls against DDoS Attacks As discussed previously in the blog post “Fortify Your Azure Firewall: Custom Public IP Configuration on Secured Virtual Hub Deployments”, in the current cloud-focused environment, the management of ...Fortify Your Azure Firewall: Custom Public IP Configuration on Secured Virtual Hub Deployments Written in collaboration with davidfrazee and gusmodena. In today's cloud-centric world, managing network security is more critical than ever. Azure Firewall has always been a robust solution f...Private IP DNAT Support and Scenarios with Azure Firewall This blog post will delve into the DNAT feature for private IP addresses for traffic between overlapping private IP addresses across networks and between non-routable private IP addresses. Monitoring traffic flows in Azure Firewall using Virtual Network Flow Logs In this blog post we will show you a different approach to enhance the monitoring experience of Azure Firewall by using Virtual Network Flow Logs and Traffic Analytics. This combination provides a co...Guarding the Gates: Exploring Supported Scenarios for Azure DDoS Protection and Public IP Prefixes In this blog post we are showing you the scenarios where Azure DDoS Protection can help protect Public IP Prefixes from these attacks. Part 2 - Managing Azure Firewall Network Rules with Illumination In this blog series we are exploring Illumio for Microsoft Azure Firewall, an integrated solution that extends the advantages of Zero Trust Segmentation into Azure environments. Part 1 - Managing Network Rules by using Azure Tags with Illumio for Microsoft Azure Firewall In this blog series where are exploring Illumio for Microsoft Azure Firewall, an integrated solution that extends the advantages of Zero Trust Segmentation into Azure environments. Intrusion Detection and Prevention System (IDPS) Based on Signatures In the world of cybersecurity, the threat of cyber attacks is ever-present. One way to protect against these threats is through the use of an Intrusion Detection and Prevention System (IDPS). But wha...
MicrosoftMicrosoftMicrosoftMicrosoft
