Azure Firewall Migration to vWAN Hub

Question

I have a question regarding migrating/replacing Azure Firewall (in this case standard Firewall) in a hub-and-spoke network, and replacing with a Azure secured VWAN hub.

I have looked at the following migration guide which includes secured WAN: https://learn.microsoft.com/en-us/azure/virtual-wan/migrate-from-hub-spoke-topology

It mentions creating a new policy within Firewall manager however if we have an existing Firewall policy attached to the standard firewall within the hub-and-spoke I assume this can be re-associated instead of having to recreate all the rules from scratch (since we have a few).

I'm aware that rules may have to be altered for the vwan hub (new) subnet however any best practices or things to avoid would be useful information - Thanks!

Answer 1

Hi Eddie Vincent,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Yes, Firewall policy a global resource that can be used across multiple Azure Firewall instances in Secured Virtual Hubs and Hub Virtual Networks. Policies work across regions and subscriptions.

Refer this link :

Azure Firewall Manager policy overview | Microsoft Learn

If you have any further concerns, please do not hesitate to contact us.We are pleased to help you.

If the information is helpful, please click on "Upvote" and "Accept Answer" so that it would be helpful to other community members.