Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,595 questions
0 answers
Traffic not flowing via azure firewall when using site to site vpn
I have created a site-to-site connection between AWS and Azure. In Azure, I have a firewall in place. When the gateway connection is established, traffic is not flowing through the Azure firewall. However, when the gateway connection is disconnected or…
asked 2024-12-26T17:31:22.2366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 34%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Anushankar Konduri
0
Reputation points
edited a comment 2024-12-31T05:00:02.7+00:00
Anushankar Konduri
0
Reputation points
0 answers
Using Azure Private Resolver with Firewall DNS proxy
Hi, I am currently looking at implementing Azure DNS private resolver (inbound and outbound endpoint subnets) within a hub-and-spoke network with the ultimate goal of resolving DNS to/from an on premise site located down a VPN connection and the spokes…
asked 2024-09-10T10:39:50.1433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 94%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEV%3C/text%3E%3C/svg%3E)
Eddie Vincent
85
Reputation points
commented 2024-12-31T04:25:34.4366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 0%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Silvia Wibowo
4,261
Reputation points Microsoft Employee
0 answers
connectivity issue over internet via azure firewall
Hi Team, I have a vm A in a vnet (SPOKE) region japan who talks to public ip on internet via azure firewall (HUB). We have a udr default route pointing to Firewall , all traffic to internet goes via azure firewall. We see that VM talks to destination…
asked 2024-12-30T12:00:01.8633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 33%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E5%3C/text%3E%3C/svg%3E)
56789
5
Reputation points
commented 2024-12-30T20:05:15.34+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 17%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Rohith Vinnakota
1,515
Reputation points Microsoft Vendor
0 answers
requests from synapse pipelines blocked by firewall policy of cosmDB.
hello team, the requests are getting originated from synapse analytics pipelines to nosql coosmosDB. the requests are getting blocked by firewall settings of cosmosdb as the request IPs are different one for every run and requesting through public…
asked 2024-12-04T16:21:38.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 98%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
ANKIT GHENGE
40
Reputation points
commented 2024-12-30T18:08:28.67+00:00
Oury Ba-MSFT
19,831
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure private zone with on prem ADDNS
I had a requirement to use the Azure firewall proxy to capture and log DNS traffic comping Azure private link services. My plan was to setup conditional forwarder for all private DNS resources from on prem to Azure firewall using firewall proxy to DNS…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 46%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
1 answer
Azure Firewall DNS Proxy Failing to Resolve SCM Records in Private DNS Zones
I have a hub-and-spoke architecture in Azure where I'm using Azure Firewall in the hub as a DNS proxy. I have multiple private DNS zones configured in the hub and have established VNet links to my spoke networks. I've also added A records for my function…
asked 2024-12-19T16:24:15.6466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 16%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Sagar Baghel
10
Reputation points
commented 2024-12-27T09:33:57.3633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati
2,665
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
Firewall turn on
https://learn.microsoft.com/en-us/azure/firewall/firewall-faq#how-can-i-stop-and-start-azure-firewall using the instructions awhile back to save $$, we disabled the farewell, now I need to turn it back on. Wanting to stay with this docs by MS. what do i…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 36%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EED%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Does traffic from Azure Firewall to Service Tag like Azure Monitor stays on backbone
Hi, I have hosted some containers in Azure which are sending telemetry to Application Insight. We have a firewall in the connectivity hub. All spoke traffic (0.0.0.0/0) is routed to the firewall. So the outbound traffic from container to Application…
asked 2024-12-20T05:28:14.64+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 19%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER2%3C/text%3E%3C/svg%3E)
RajivBansal-2486
266
Reputation points
accepted 2024-12-24T07:18:49.8366667+00:00
RajivBansal-2486
266
Reputation points
1 answer
One of the answers was accepted by the question author.
Unable to find list of FQDNs/IP Addresses that are part of FQDN and Service Tags on Azure Firewall
We know there are many FQDN tags and Service Tags for Azure firewall, informed in the below articles as well: https://learn.microsoft.com/en-us/azure/firewall/fqdn-tags https://learn.microsoft.com/en-us/azure/firewall/service-tags However, not able…
asked 2024-12-13T20:41:37.34+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 89%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Rakesh Singh
310
Reputation points
accepted 2024-12-20T01:29:35.13+00:00
Rakesh Singh
310
Reputation points
1 answer
Do we need to enable Azure firewall threat intelligence protection even if the communication is private via express route circuit
We have hybrid connectivity model setup in our environment where on-premises network is connected to Azure via Express route circuit with private peering enabled. on the Azure firewall policy we have explicitly denied outbound internet connectivity…
asked 2024-12-18T10:54:00.5266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 76%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Mahesh Badgujar
40
Reputation points
commented 2024-12-19T07:01:47.1033333+00:00
KapilAnanth-MSFT
48,081
Reputation points Microsoft Employee
1 answer
AKS Networking with Application Gateway and Azure Firewall
Hello everyone, I am currently implementing a solution in Azure that involves using Azure Kubernetes Service (AKS) as a backend, along with an Application Gateway for incoming traffic. Additionally, I have configured an Azure Firewall to manage outbound…
asked 2024-12-13T13:48:50.45+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 21%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
krutibasa majhi
0
Reputation points
commented 2024-12-18T09:36:30.8266667+00:00
KapilAnanth-MSFT
48,081
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Can you add a Network rule with "*" in the namespace and an Application rule with port 445 in Azure firewall?
Hi Team, We have a requirement, wherein we have to allow a URL on Azure firewall with following requirement: URL: *.abc.com Port: 445 Now, I cannot create an application rule with port 445 and Network rule doesn't accept "*" in the URL.…
asked 2024-12-13T20:31:11.9566667+00:00
Rakesh Singh
310
Reputation points
accepted 2024-12-17T23:08:47.1933333+00:00
Rakesh Singh
310
Reputation points
0 answers
Network latency between Azure Global VNet Peering
Hi Team, I have a scenario below. Users at the East US site access the webpage site1.abc.com which is hosted on a Citrix Netscaler in the Central US region. Users from the East US site connect in multiple ways, through VPN or AVD environment to access…
asked 2024-12-14T13:24:05.3933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 6%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
SHAKIR SHAIKH
0
Reputation points
commented 2024-12-17T11:43:52.55+00:00
KapilAnanth-MSFT
48,081
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
We have an Azure Virtual WAN deployement secure by Azure Firewall High Availability
Do i understand correctly that everthing inside virtual WAN is deployed automaticaly in Availability zones? Besides the Azure Firewall components for this you need to redeploy them. https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-faq I…
asked 2024-12-16T12:23:16.32+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 63%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDM%3C/text%3E%3C/svg%3E)
De Muyter, Frederik (INF)
20
Reputation points
accepted 2024-12-17T09:25:20.2233333+00:00
De Muyter, Frederik (INF)
20
Reputation points
2 answers
One of the answers was accepted by the question author.
Azure Firewall vs NSG rules
Hi all, I'm studying for the AZ-700 at present and making progress but came up with a query. If I have a rule in the NSG to block RDP connections and a rule in Azure Firewall to allow RDP - which takes priority? Kind regards Tom
asked 2023-08-19T22:06:53.6433333+00:00
Tom Wrigglesworth
91
Reputation points
commented 2024-12-13T10:07:18.88+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 46%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Sairam Waddepally
0
Reputation points
1 answer
One of the answers was accepted by the question author.
Site to Site VPN Connection
I have configured site to site VPN as per the Microsoft documentation. We have created: Vnet Vnet Gateway Local network gateway Connection We have configured with all the client's requirement. We are seeing connection status: Unknown We have also created…
asked 2024-10-25T12:40:28.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 33%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVS%3C/text%3E%3C/svg%3E)
VATIKA SAXENA
20
Reputation points
accepted 2024-12-10T10:08:54.17+00:00
VATIKA SAXENA
20
Reputation points
1 answer
Why can't I see DNS responses in Azure Firewall Log?
This is mostly a logging/KQL question, I think... I have an Azure firewall (Premium SKU) with a rule that allows DNS requests on the standard port and it works fine. I can use dig @<dns-ip> ... and get the response I would expect to see. However,…
asked 2024-12-09T23:50:59.5533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 86%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Rueff, Adm_Glenn
0
Reputation points
answered 2024-12-10T04:14:39.4066667+00:00
KapilAnanth-MSFT
48,081
Reputation points Microsoft Employee
1 answer
Send all traffic to the internet through the Check Point firewall except Entra Domain services
Hi I have a Check Point firewall in Azure, and I want to send all traffic to the internet through the Check Point firewall except Entra Domain services. I have deployed a user-defined route and added two routes. The first route is configured as…
asked 2024-11-28T15:41:15.2866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 35%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHB%3C/text%3E%3C/svg%3E)
HASSAN BIN NASIR DAR
351
Reputation points
answered 2024-12-09T16:42:24.3366667+00:00
Rohith Vinnakota
1,515
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
Azure Firewall configuration issue
Hi, I'm new to Azure and I have couple of queries regarding Azure Firewall, Is it ok to use a NSG at Azure Firewall subnet level in a Virtual Network? I have made some changes to my Firewall and all of sudden, it is showing provisioning state failed.…
asked 2024-12-06T02:59:46.8033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 71%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM3%3C/text%3E%3C/svg%3E)
Martinmajestic-3285
60
Reputation points
accepted 2024-12-09T01:23:04.21+00:00
Martinmajestic-3285
60
Reputation points
1 answer
How do I run a pcap on Azure Firewall?
I am trying to build a non Meraki VPN tunnel to a Meraki vMX appliance that sits behind an Azure Firewall. I suspect that I am missing a Network or DNAT rule to allow interresting traffic. I need visibility on the traffic flow to understand why traffic…
asked 2024-11-27T17:39:19.4866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 91%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKD%3C/text%3E%3C/svg%3E)
Kryptic Dwarf
0
Reputation points
edited an answer 2024-11-29T23:03:16.3633333+00:00
Rohith Vinnakota
1,515
Reputation points Microsoft Vendor