Is there a limit of how many IP ranges can be in Source field in a single DNAT rule in Azure Firewall Standard?
Hi Is there a documented limit on the maximum number of IP address ranges that can be specified in the Source field in a single DNAT rule in Azure Firewall Standard SKU? I was looking at Policy Analytics for my Azure Firewall Policy, and 1 of the…
Connecting Azure FrontDoor to Azure app services through VWAN integrated with Azure firewall
Here is the scenario for the setup we have: We have one subscription (HUB ) created to deploy secured Azure virtual WAN integrated with Azure firewall with Microsoft paired regions East US (primary region) and West US (secondary region). This is…
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
Express Route and VPN together
Our scenario: We are planning to use Express Route, VWAN integrated with Azure Firewall in East US (primary site) and West US (secondary/DR site) and we will be connecting the on-premise data center with Express Route. Questions: If we are using the…
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
![](https://techprofile.blob.core.windows.net/images/Z5INGQQc9Uy45E6S986Teg.png?8DD4A2)
Traffic Forwarding from one VM to another VM in Azure
Hello, I am looking for a solution to forward traffic from a web VM to an app VM. Specifically, when a user tries to access the web VM on port 6545, the traffic should be routed through the web VM to the app VM on port 6767. Can this be achieved in…
Does Basic Azure Firewall supports X-FOrward-For
Does Basic Azure Firewall supports X-FOrward-For? How do I verify the client IP is passing to VM(apache2)?
Adding firewall in front of web apps in Hub-and-Spoke architecture
Hi, I am shifting towards hub & spoke model in my Azure subscription so that all the traffic coming into my subscription goes through the firewall. I have multiple types of resources but I am more concerned about web apps and function apps. How can…
Route only P2s traffic through firewall
I have a relatively simple network setup A spoke(192.168.0.1/24) and a hub network(172.17.32.0) .In the hub network I have a firewall in firewall subnet and a vpn gateway in gateway subnet.In the vpn gateway i have configured multiple s2s tunnels and …
When to use Azure WAF or Azure Firewall ?
Hi Folks, Can anyone here please share some thoughts and comments of when to use Azure WAF or Azure Firewall? I have already existing Azure ExpressRoute so my Azure VMs can ping my OnPremise servers, and vice versa. My purpose here is to be able to…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Unable to access API endpoint in AWS from Azure VM
Hello Team, I'm trying to ping one of the API endpoint which is hosted in AWS behind a loadbalancer from Azure VM. I'm getting request timeout error. I've allowed the Source (Azure VNnet CIDR) and Destination (AWS VPC CIDR) and port 443 in Azure…
cannot read firewall log
When I try to run query against the firewall logs, below error returns: 'parse' operator: Failed to resolve scalar expression named 'msg_s' If the issue persists, please open a support ticket.
AKS Networking with Application Gateway and Azure Firewall
Hello everyone, I am currently implementing a solution in Azure that involves using Azure Kubernetes Service (AKS) as a backend, along with an Application Gateway for incoming traffic. Additionally, I have configured an Azure Firewall to manage outbound…
Azure Firewall ICMP Protocol
Hi, I need to allow Domain Controller on Azure platform which is behind Azure Firewall to communicate with Domain Controller of customer. For that I need to allow ICMP Protocol. When I tried to allow ICMP in firewall network rule I get to know that it is…
I am unable to view service tags while adding a network rule in Azure Firewall.
Title Unable to View Service Tags When Adding a Network Rule in Azure Firewall Details I am unable to view service tags while adding a network rule in Azure Firewall. I am selecting the Destination type as Service Tag, but I can only see Office 365…
Guidance Needed for Configuring Azure Firewall for Outbound Traffic Control
Hi Experts, We currently have a setup with one HUB VNet and five Spoke VNets, all of which are peered. Additionally, there is a Site-to-Site (S2S) connection established between our on-premises network and Azure. The five Spoke VNets host multiple VMs…
Config Azure Firewall DNS for private endpoint without using Azure Private Resolver
Hello, Lately I config a system like below Here is some description: We have 3 Vnet: VNet test (172.22.0.0/16). Inside this subnet, I set up a subnet(172.22.0.0/24) and a VM test inside this subnet VNet Hub (10.18.0.0/16): inside this subnet I config…
How to allow outbound web traffic only
Hello, I have setup an Azure Firewall and routes to control all traffic via the Azure Firewall. The firewall is deploy in the Hub and attached to an Express route circuit (Hub/Spoke) Additionally I have setup a rule collection group with the priority…
Azure Firewall DNS Proxy Failing to Resolve SCM Records in Private DNS Zones
I have a hub-and-spoke architecture in Azure where I'm using Azure Firewall in the hub as a DNS proxy. I have multiple private DNS zones configured in the hub and have established VNet links to my spoke networks. I've also added A records for my function…
Azure Firewall Policy Analytics: "Rules with low utilization" 60/90 day time period
I have the following issue with Policy Analytics: When viewing 'Rules with low utilization' I want to change the time period to 90 days (using the cog in upper right of the pane), but the options for 60 and 90 days are greyed out. I can only select 30…
Traffic not flowing via azure firewall when using site to site vpn
I have created a site-to-site connection between AWS and Azure. In Azure, I have a firewall in place. When the gateway connection is established, traffic is not flowing through the Azure firewall. However, when the gateway connection is disconnected or…
How to get all firewall rules with all the properties via Azures Resource Graph?
Hi, I need help with proper formulation of a query that would give me all firewall rules with all properties so it can be saved as a CSV file. All rules from a particular directory.