| Learning objective | What you’ll learn | Reference |
|---|---|---|
| Understand core capabilities | Stateful traffic inspection, built‑in high availability, scalability, logging/monitoring, and integrations with Azure services | Azure Firewall overview |
| Rule processing (NAT, network, application) | How Azure Firewall evaluates and applies NAT rules, network rules, and application rules to control traffic flow | Rule overview |
| Deployment and configuration | Step‑by‑step setup from the Azure portal, recommended settings, and operational best practices | Azure portal |
| Hub-and-spoke integration | Using Azure Firewall as a central security point in a hub-and-spoke topology, routing and UDR considerations, and traffic inspection patterns | Hub-and-spoke architecture |

Before you begin, ensure familiarity with Azure Virtual Network fundamentals, route tables (UDRs), and basic Azure role-based access control (RBAC). These topics ease deployment and troubleshooting when you configure Azure Firewall rules and routing.
- Introduce core Azure Firewall concepts and capabilities, including high availability and telemetry.
- Step through rule processing order and examples for NAT rules, network rules, and application rules.
- Demonstrate a common hub-and-spoke deployment pattern with configuration examples, routing considerations, and traffic-flow diagrams to reinforce the concepts.