firewall
4 TopicsAzure Firewall vs checkpoint firewall
Hello Everyone, I am using checkpoint firewall with listed feature right now. I am planning to move with Azure firewall. Little scared here as what's going to support & what's not? 1. Layer 3 access rule 2. Layer 7 Access rule (URL filtering) 3. FQDN based rule 4. Updatable object 5. https inspection 6. IPsec VPN 7. Static & hide NAT1.7KViews0likes0CommentsManaging User Access to Internet on Windows Virtual Desktop
I'm very interested in this product and previously, we implemented our own solution through Azure Virtual Machines which we had to manage completely. In our particular use case scenario, we want to control users' access to Internet and block certain protocols. Here are two specific examples of what we want to do: We'd like to create a white list of websites users can visit and block all the rest. We'd like to turn off FTP protocol completely and take any other action we can to prevent users from "uploading" files to outside world. How could we handle these two scenarios if we were to use Azure Windows Virtual Desktop?5KViews0likes1CommentCan Azure Firewall be used to Route traffic between Network (just like NVA)?
Folks, We want to route traffic from Onpremise to multiple Azure VNets part of same Subscription using Network Virtual Appliance (NVA). However, to save on cost thinking to use Azure Firewall However, not sure if its allows to route traffic from ONpremise to Azure Subscription and vice versa? (Check reference NVA Diagram: https://azurecomcdn.azureedge.net/mediahandler/acomblog/media/Default/blog/2db17e69-d2fa-4950-8a27-d117e9496f3e.png) Kindly confirm if Azure Firewall has the capability at this point of time?2.6KViews0likes1CommentAzure network rules - statefull firewall
Hello Team, There are so many different types of network rules in Azure. For example those defined for cloud services: https://msdn.microsoft.com/en-us/library/azure/gg557551.aspx Or network security groups for VM traffic. Are any of those statefull firewalls ? Do we track TCP sessions ? And accept return traffic by default ? For example inbound security rules in NSG: it looks like returning traffic is accepted by default ? Assuming it's matching corresponding session (so we need to track TCP sessions). Are we statefull then ? Thanks,Solved1.3KViews0likes1Comment