Azure Basic Firewall Public IP Egress calls
I have an azure basic firewall, From one of my VM egress call happening to a URL(Which is whitelisted). I have around 12 Public IPs attached to Firewall. How do I verify from which Public IP the request landed in target(no access logs available in…
Network Hub and spoke
I have the following scenario, Virtual network gateway (only one) This network gateway has VPN IPSEC connected. This network gateway has VPN Point-to-Site (Aovpn) This network gateway provides the routing for other vnet using the architecture hub…

Unexpected Network Traffic Reaching VM Despite NSG Configuration in Azure
We are experiencing an issue where network traffic is reaching our Virtual Machine, even though our Network Security Group (NSG) is configured to block this traffic. For example, traffic on port 80 is being logged by UFW on the VM, despite the NSG rules…
How come Azure KeyVault Private DNS works differently to Azure SQL Servers?
I have recently started Private Endpointing all of our infrastructure. As we are in Hub to Spoke environment we are using one Private DNS for each resource type which is then linked to the spokes and Hubs. We then create private endpoints for each…
Cannot connect to Application Service from the Application Gateway when Private endpoints and Virtual Network Integration
Cannot connect to Application Service from the Application Gateway when Private endpoints and Virtual Network Integration Application Gateway give 502 error
What I'm trying to accomplish vs. What I'm being charged for...Help
I'm trying to use Azure Free Account in a way that most probably are not used to seeing. I have a hobby of tracking and managing a statistics database for eSports on the side. I came across the free Azure account and it seemed like a good way to manage…
Security and protection against ransomware/malware in Azure
We have VPN S2S connections from various locations. Plannign to deploy Azure Standard firewall. None of the VMs have public ips. We will be configuring azure sql managed instance with private endpoints and storage accounts with private links. Also will…
Does Basic Azure Firewall supports X-FOrward-For
Does Basic Azure Firewall supports X-FOrward-For? How do I verify the client IP is passing to VM(apache2)?
Is there a limit of how many IP ranges can be in Source field in a single DNAT rule in Azure Firewall Standard?
Hi Is there a documented limit on the maximum number of IP address ranges that can be specified in the Source field in a single DNAT rule in Azure Firewall Standard SKU? I was looking at Policy Analytics for my Azure Firewall Policy, and 1 of the…
internalserver error when deploying firewall
Have been unable to deploy Azure firewalls today, using either deployment pipelines or using the portal, even tried differenent tenant to rule out any forced policies, same error: { "code": "InternalServerError", …
Traffic not flowing via azure firewall when using site to site vpn
I have created a site-to-site connection between AWS and Azure. In Azure, I have a firewall in place. When the gateway connection is established, traffic is not flowing through the Azure firewall. However, when the gateway connection is disconnected or…
Route only P2s traffic through firewall
I have a relatively simple network setup A spoke(192.168.0.1/24) and a hub network(172.17.32.0) .In the hub network I have a firewall in firewall subnet and a vpn gateway in gateway subnet.In the vpn gateway i have configured multiple s2s tunnels and …
Azure firewall monitoring only
I'm looking to implement Azure firewall with FQDN restrictions but ideally I'd like to deploy it in some sort of "monitor only" mode that will let me view logs to determine which FQDNs should be allowlisted. Is that possible? Thank you
Traffic Forwarding from one VM to another VM in Azure
Hello, I am looking for a solution to forward traffic from a web VM to an app VM. Specifically, when a user tries to access the web VM on port 6545, the traffic should be routed through the web VM to the app VM on port 6767. Can this be achieved in…
Connecting Azure FrontDoor to Azure app services through VWAN integrated with Azure firewall
Here is the scenario for the setup we have: We have one subscription (HUB ) created to deploy secured Azure virtual WAN integrated with Azure firewall with Microsoft paired regions East US (primary region) and West US (secondary region). This is…


Express Route and VPN together
Our scenario: We are planning to use Express Route, VWAN integrated with Azure Firewall in East US (primary site) and West US (secondary/DR site) and we will be connecting the on-premise data center with Express Route. Questions: If we are using the…


Adding firewall in front of web apps in Hub-and-Spoke architecture
Hi, I am shifting towards hub & spoke model in my Azure subscription so that all the traffic coming into my subscription goes through the firewall. I have multiple types of resources but I am more concerned about web apps and function apps. How can…
When to use Azure WAF or Azure Firewall ?
Hi Folks, Can anyone here please share some thoughts and comments of when to use Azure WAF or Azure Firewall? I have already existing Azure ExpressRoute so my Azure VMs can ping my OnPremise servers, and vice versa. My purpose here is to be able to…

Unable to access API endpoint in AWS from Azure VM
Hello Team, I'm trying to ping one of the API endpoint which is hosted in AWS behind a loadbalancer from Azure VM. I'm getting request timeout error. I've allowed the Source (Azure VNnet CIDR) and Destination (AWS VPC CIDR) and port 443 in Azure…
cannot read firewall log
When I try to run query against the firewall logs, below error returns: 'parse' operator: Failed to resolve scalar expression named 'msg_s' If the issue persists, please open a support ticket.