Azure Firewall Session table

Question

Hi Team,

If we manage azure firewall policies through azure firewall manager then Is it possible to see traffic/connections/ session table of Azure firewall from firewall manager or from firewall itself ( Like how we can see traffic in Palo Alto or FortiGate firewalls) ?

Answer 1

@Siddhesh Rane

Thank you for reaching out.

I understand you have question about Azure Firewall logs for existing and past connections.

I think Structured Firewall Logs for Azure Firewall can help in this case, where you can explore Flow trace logs these firewall logs show traffic through the firewall in the first attempt of a TCP connection, known as the SYN packet.

Additional References:

https://techcommunity.microsoft.com/t5/azure-network-security-blog/exploring-the-new-resource-specific-structured-logging-in-azure/ba-p/3620530

Please let me know if you have any additional questions. Thank you!

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hey Siddhesh Rane ,

Thank you for reaching out on the Microsoft Q&A .

While Azure Firewall Manager doesn't have a built-in session table like traditional firewalls, you still have options to monitor traffic. Azure Firewall integrates with Azure Monitor logs, allowing you to send logs to a central workspace for analysis of traffic flows, connections, and firewall actions.

Check out this documentation for details: https://learn.microsoft.com/en-us/azure/firewall/firewall-diagnostics.

I hope this helps! If you have any further questions, feel free to ask.

If the information is useful, please accept the answer and upvote it to assist other community members.