Skip to main content
Design and implement Azure Firewall. Azure Firewall is a cloud-native, stateful firewall-as-a-service that protects Azure virtual networks by providing centralized, policy-driven network and application-level protection. It inspects and logs traffic, offers high availability by default, and integrates with Azure monitoring and policy services to deliver a scalable enforcement point for enterprise network architectures. Below are the learning objectives for this lesson. We’ll:
  • Understand the core capabilities of Azure Firewall, including stateful traffic inspection, built-in high availability, and integration with Azure Monitor, Azure Policy, and diagnostic logging.
  • Learn how Azure Firewall evaluates and applies NAT rules, network rules, and application rules to control, filter, and translate traffic.
  • Explore deployment options and step-by-step configuration of Azure Firewall using the Azure portal (Azure portal) and automation approaches.
  • See how Azure Firewall functions as a central security enforcement point in hub-and-spoke network topologies, including traffic flow patterns and route considerations.
  • Clarify differences between Azure Firewall and other Azure network controls (Network Security Groups, Azure DDoS Protection, Application Gateway) to determine the appropriate use case for each.
The image outlines learning objectives related to Azure Firewall, including its capabilities, processing of NAT and network rules, setup, and use in network design. It features a colorful design with numbered points.

​
Learning outcomes (at a glance)

Tip: Use Azure Firewall as the centralized enforcement layer for outbound and east-west traffic in hub-and-spoke topologies, and pair it with NSGs for per-subnet micro-segmentation to achieve layered defense.
Warning: Azure Firewall is billed based on deployment SKU and processed data; review pricing and service limits before production deployment. See the Azure Firewall pricing and limits documentation for details.

Watch Video