Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
657 questions
0 answers
On-premises expressroute BGP is advertising 0.0.0.0/0 and using Azure Firewall to control traffic (including internet)
hi My environment is an on-premises expressroute BGP is advertising 0.0.0.0/0. I want to use Azure Firewall to control all traffic (including internet). See and discuss the architecture picture attached below. My guess is that we need to send the route…
asked 2024-09-18T03:07:24.1133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 99%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
romero
105
Reputation points
commented 2024-09-19T19:19:58.6266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati (Quadrant Resource LLC)
175
Reputation points Microsoft Vendor
1 answer
Hub and two Spoke vnets with AFW in Hub and traffic from Expressroute
Hello, I have got problem with not going traffic via Azure Firewall from ExpressRoute to one of two spoke vnets(I don't see any traffic on Firewall logs but I can see traffic with tcpdump on VM in spoke). Traffic to on-prem via ExpressRoute works fine…
asked 2024-09-18T08:55:52.09+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 15%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Sepski, Krzysztof Antoni
0
Reputation points
answered 2024-09-19T14:13:11.7366667+00:00
Sepski, Krzysztof Antoni
0
Reputation points
0 answers
Unable to send a SIP request from SBC via express route
We are using audiocodes sbc for voice in Azure. We have private connectivity via express route with provider and established vpn connectivity. we have two sip trunks already working now we are trying to build a new trunk over this path. Post provider…
asked 2024-09-13T10:56:45.04+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 35%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
Nser Mahajan
0
Reputation points
commented 2024-09-18T17:32:42.7566667+00:00
Ganesh Patapati (Quadrant Resource LLC)
175
Reputation points Microsoft Vendor
0 answers
Is it possible to enable diagnostic settings for express route gateway resource?
Is it possible to enable diagnostic settings for express route gateway resource? if yes, how can we create a deploy if not exist policy to achieve it?
asked 2024-09-09T10:11:34.41+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 2%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Ajit Ramachandra Sane
0
Reputation points
commented 2024-09-13T17:07:05.74+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 81%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sai Prasanna Sinde (Quadrant Resource LLC)
100
Reputation points Microsoft Vendor
2 answers
how is the route table of the azure private peer of an expressRoute created and how do i flush 1 entry
We have a wrong entry in our routing table due to a misconfiguration of a bastion subnet. We changed the subnet, but the route remains.
asked 2024-09-09T14:13:56.6166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 18%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E8%3C/text%3E%3C/svg%3E)
86842230
0
Reputation points
answered 2024-09-11T07:52:28.0033333+00:00
KapilAnanth-MSFT
44,556
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
How to become Express Route Connectivity Provider?
Dear, Can anybody give me a hand and show the process of becoming Microsoft Partner in a range of delivering Express Routes to final customers ? I mean - how to get on this list…
asked 2024-09-09T11:14:42.1033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 40%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Andrey Rassiysky
20
Reputation points
accepted 2024-09-10T10:56:59.47+00:00
Andrey Rassiysky
20
Reputation points
0 answers
How can I tell the resiliency level of an EXISTING (already provisioned) ExpressRoute Circuit?
How can I tell the resiliency level of an EXISTING (already provisioned) ExpressRoute Circuit?
asked 2024-09-10T08:58:01.4733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 66%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EED%3C/text%3E%3C/svg%3E)
Erik Drueding
0
Reputation points
asked 2024-09-10T08:58:01.4733333+00:00
Erik Drueding
0
Reputation points
0 answers
how can you tell the resiliency level of an existing (already provisioned) ExpressRoute Circuit?
trying to copy a EXR Circuit 1:1 & there seems to be no way to tell what kindof resiliency level is attached to an existing circuit. I've looked through the GUI, the JSON info, etc. AI answers my question like this: The resiliency level of the…
asked 2024-09-10T08:55:34.4533333+00:00
Erik Drueding
0
Reputation points
asked 2024-09-10T08:55:34.4533333+00:00
Erik Drueding
0
Reputation points
1 answer
Azure VNET Gateway for Expressroute - impact if public IP changes
I have a production environment that has a VNET Gateway (type Expressroute) and it's working fine right now. However, the public IP that it has is a Basic SKU, and that's going away on September 30, 2025. On top of that, it's a dynamic Public IP. I…
asked 2024-09-09T19:39:50.93+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 25%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECL%3C/text%3E%3C/svg%3E)
Chris Lhamon
0
Reputation points
answered 2024-09-10T07:21:32.6533333+00:00
KapilAnanth-MSFT
44,556
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure Hub Network with NVA and azure firewall and routing between VPN and Express route gateway through firewalls
Hi Team, I have attached the network diagram, Here is set up. There is HUB and Spoke topology with NVA. All traffic between on-premise and azure spoke is passing through NVA Third party location is connected through SDWAN VM over internet. SDWAN VM is…
asked 2024-08-20T21:58:14.7633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 67%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Siddhesh Rane
41
Reputation points
commented 2024-09-10T02:28:23.4533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 17%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Rohith Vinnakota
395
Reputation points Microsoft Vendor
1 answer
Azure and Cisco Router not forming an express route BGP session
For some reason my BGP session to Azure through an Express Route connection is not forming. Below is the configuration of the Express Route Circuit: Peer AS: 65000 Subnets: IPv4 Primary IPv4: 10.x.x.0/30 Secondary IPv4 10.x.x.4/30 Vlan ID: XXX Cisco…
asked 2024-02-16T15:21:59.3+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 61%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGF%3C/text%3E%3C/svg%3E)
Gunther Fembini
0
Reputation points
answered 2024-09-09T13:49:29+00:00
Gulnaz Mushtaq
410
Reputation points MVP
1 answer
cannot ICMP or Route to any subnets from on premises through express route
We have a connection from our On-Prem data center to Azure using express route. I can ping the peer IP address and see the neighbor from on premises router using #sh ip bgp neighbor and #sh ip bgp summary. I am trying to ping a VM in a created subnet and…
asked 2024-09-05T15:31:03.0033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 5%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGJ%3C/text%3E%3C/svg%3E)
Gamal Joseph
0
Reputation points
answered 2024-09-06T13:20:40.94+00:00
Ganesh Patapati (Quadrant Resource LLC)
175
Reputation points Microsoft Vendor
1 answer
from my on-premises setup i am unable to send the traffic to another VNET behind my Azure VNET. I have an Expressroute Gateway and an NVA in my subscription.
I have an on premises range 192.168.200.8/29, connected to Azure Network through Azure Express Route (gateway type - Express Route) and and NVA-Firewall. We are unable to route the traffic from an on-prem to another VNET. The traffic is getting dropped…
asked 2024-09-04T14:29:01.4933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 55.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Sujith Gopalakrishnan
0
Reputation points
answered 2024-09-06T08:45:07.19+00:00
Ganesh Patapati (Quadrant Resource LLC)
175
Reputation points Microsoft Vendor
1 answer
Users are not able to see some resources in a resource group where they have respective contributor access.
I created a resource group and added some resources in that. There I added my team through security group which has respective contributor roles for those resources. Some of these resources including blob storage is not visible to the team. To…
asked 2024-08-29T11:24:41.9633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 60%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPD%3C/text%3E%3C/svg%3E)
Pankaj Dua
0
Reputation points
commented 2024-09-04T10:44:59.49+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 64%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENR%3C/text%3E%3C/svg%3E)
Nehruji R
7,556
Reputation points Microsoft Vendor
1 answer
Configuration of an external firewall + ExpressRoute
Hello Community, I read a few threads here in the forum about a similar case, but the answer wasn't 100 percent clear to me. The following structure: I have an ExpressRoute via a VPN gateway in Azure, which is connected to OnPrem. An NVA (not from…
asked 2023-09-19T06:16:27.5466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 46%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPG%3C/text%3E%3C/svg%3E)
Philipp Gerber
271
Reputation points
commented 2024-08-26T06:39:02.0166667+00:00
KapilAnanth-MSFT
44,556
Reputation points Microsoft Employee
1 answer
How to send traffic from a spoc (Hub and Spoc topology) to workload behind NVA present in 3rd party connected via Express route which only broadcast the NVA subnet range
Hi, In my scenario - From Azure Spoc, we are trying to reach workload for example (10.129.31.35) present behind a NVA hosted in a 3rd party system which is connected to Azure Hub vnet via Express route to Azure and broad cast only NVA's subnet range…
asked 2024-08-20T16:57:44.2966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 59%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mukherjee, Aniket
0
Reputation points
answered 2024-08-22T03:01:14.7866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
25,856
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Synchronize with Entra Connect through ExpressRoute
Hello, Hope you are doing well! I think it is the prerequisite to deploy the hybrid AVD environment, so I need to use Entra Connect to synchronize the on-premise AD and Entra ID in a locked hybrid network which connected by ExpressRoute between…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 62%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY%3C/text%3E%3C/svg%3E)
1 answer
Express Route private peering - BGP peering on prem but not in Azure
Established express route private peering. BGP sessions are established to on prem (see output below). Why isn't the Virtual Network Gateway displaying BGP Peering status? LCCO-AMdurNC01Brt11-AWS#sho ip bgp all summary Neighbor V AS…
asked 2024-08-10T04:46:09.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 63%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Thompson, Daryl
20
Reputation points
answered 2024-08-12T08:57:17.0033333+00:00
KapilAnanth-MSFT
44,556
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
How to debug where BGP session is failing
I've setup an Azure express route private peering session with on prem. Layer 2 connection is verified. I can ping from on prem to Azure. The ARP tables look good. The BGP peers are communicating but the BGP session is not established. How can I find out…
asked 2024-08-09T22:37:09.22+00:00
Thompson, Daryl
20
Reputation points
edited the question 2024-08-12T03:23:29.7366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 86%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
AmaranS
6,020
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
Branchoffice not available via ExpressRoute
Infrastructure: Azure - ExpressRoute Circuits (BGP) Subnet 10.20.0.0/16 Main Office Sophos Firewall Subnet 10.0.0.0/24 Branch Office Sophos Firewall Subnet 192.168.110.0/23 Azure (AVD) is connected via ExpressRoute to the Main Office. The…
asked 2024-07-31T14:25:26.9433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 96%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Tom de Smidt | Hermac BV
20
Reputation points
accepted 2024-08-07T11:18:29.78+00:00
Tom de Smidt | Hermac BV
20
Reputation points