Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
634 questions
1 answer
Protocol and Port ranges for allow Logic Apps IP
We got the notification about the Logc Apps IP addresses that will need updating by Nov 12th. It doesn't specify any protocol or port ranges on the required IPs that need to be added. Can anyone clarify for me if they have to be any/any or we can limit…
asked 2024-08-13T19:58:22.3966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 70%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Shaun M
0
Reputation points
answered 2024-08-13T22:05:24.44+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
25,371
Reputation points Microsoft Employee
3 answers
One of the answers was accepted by the question author.
What are the exact Log Analytics tables to query for Azure Firewall Logs. They are nowhere to be found in the doucmentation
Every time I click logs from a resource in the Azure Portal, it drops me to Log Analytics and then I have absolutely no idea which tables to query which are specific for the resource that I've just come from. Why can't Microsoft display the relevant…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
634 questions
Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
1,139 questions
asked 2024-07-23T17:44:23.6633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 28.999999999999996%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ3%3C/text%3E%3C/svg%3E)
JohnSebastian-3934
271
Reputation points
answered 2024-08-12T19:22:33.9033333+00:00
ChaitanyaNaykodi-MSFT
25,371
Reputation points Microsoft Employee
0 answers
TLS Inspection causes error when used with internal web server: ''Error message 'x509: certificate signed by an unknown authority' displayed when using TLS Inspection with internal web server''
Question: When attempting to connect to a private, internal web server with a private certificate (signed by our internal CA) through a rule with TLS Inspection enabled, the browser displays the error message 'x509: certificate signed by an unknown…
asked 2023-07-24T17:13:21.7333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 75%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELA%3C/text%3E%3C/svg%3E)
Love Arinze
166
Reputation points
commented 2024-08-07T20:11:23.6066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 71%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJA%3C/text%3E%3C/svg%3E)
Jacob A
15
Reputation points
1 answer
azure firewall
Azure firewall is deployed in hub vnet and VPN gateway associated with hub vnet. Hub vnet is peered with spoke vnet. the spoke vnet is also associated with VPN gateway. Now the azure firewall only route traffic to vpn gateway associated with hub vnet…
asked 2024-08-05T15:16:26.7166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 80%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJC%3C/text%3E%3C/svg%3E)
Johan Conradie (MEA)
0
Reputation points
commented 2024-08-06T23:48:37.3466667+00:00
ChaitanyaNaykodi-MSFT
25,371
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure Firewall in VWAN Public IP
Hello! I currently have deployed a secured VWAN with an Azure Firewall. I am wanting my P2S VPN to come out as a static IP. I have 1 Public IP allocated to the Azure Firewall. However, I am not sure if these are Static or if they can change without…
asked 2024-07-17T13:27:27.7466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 6%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Trent Becker
51
Reputation points
commented 2024-08-05T12:14:48.03+00:00
Trent Becker
51
Reputation points
1 answer
One of the answers was accepted by the question author.
Azure Firewall scale-up 및 NSG log 관련 문의
Azure Firewall을 사용 시에 오토스케일링된다고 알고 있습니다. 저희가 지금 standard 버전을 사용 중이며, 해당 버전은 초기에 3Gbps짜리 방화벽으로 시작해서, cpu 사용량이 60%이상이면 스케일 아웃(최대크기가 30Gbps), cpu 사용량이 20 미만일때 스케일인 이라고 docs에 설명이 되어 있는데요. 오토 스케일이 아닌, 미리 초기 사용 시에 방화벽 최대 크기인 30Gbps 로 설정해놓을 수는 없는지 문의드립니다. 추가로,…
asked 2024-08-01T01:23:33.0466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 63%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPY%3C/text%3E%3C/svg%3E)
박유미(Park Youmi)(yumzzang)
20
Reputation points
accepted 2024-08-05T07:33:24.6033333+00:00
박유미(Park Youmi)(yumzzang)
20
Reputation points
1 answer
Problem to setup access to a external IP from a container using VNET and Azure Firewall
I have created a Azure Container Instance that uses a VNET to reach a private external network using an Azure Gateway to do a site-to-site connection, to give public access to the system into the container I set up an Azure Firewall with his own subnet…
asked 2024-07-30T15:57:42.26+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 71%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
Alex Cordova
0
Reputation points
commented 2024-08-02T06:33:25.6366667+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
1 answer
Can the Private IP of an Azure Firewall be Modified?
Can I change the private IP address of my Azure Firewall to a specific IP address after it has been assigned? PS - Based on common issues that we have seen from customers and other sources; we are posting these questions to help the Azure community.
asked 2024-08-01T11:37:52+00:00
GitaraniSharma-MSFT
49,441
Reputation points Microsoft Employee
answered 2024-08-01T11:38:15.5933333+00:00
GitaraniSharma-MSFT
49,441
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
ICMP Timestamp Request Remote Date Disclosure Details - The remote host answers to an ICMP timestamp request.
how to resolve this or do we have any information if we can restrict on firewall
asked 2024-07-24T14:17:37.48+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 48%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Shaweta Bhardwaj
25
Reputation points Microsoft Employee
accepted 2024-07-31T06:17:15.66+00:00
Shaweta Bhardwaj
25
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Is there a tool that will show me the flow of rules processing in Azure Firewall to debug my rules and rule collections?
Azure Firewall Policy Rules and Rule collections can be complicated and confusing. Is there a tool available (and if not, can Microsoft actually build a useful tool?) that customers can use to show the entire flow of rules processing in the Azure…
asked 2024-07-30T16:12:24.5866667+00:00
JohnSebastian-3934
271
Reputation points
accepted 2024-07-30T21:57:08.2133333+00:00
JohnSebastian-3934
271
Reputation points
0 answers
my virtual machine cannot ping public IPs
Hello guys, I need help from everyone, my issue is with the public IP addresses that I cannot ping in my virtual machine. So if anyone can help me with this. I specified that the public IP address of my firewall is what works on my virtual machine but…
asked 2024-07-19T19:30:10.0233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 79%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
amadou diallo
20
Reputation points
commented 2024-07-24T07:59:38.6166667+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
0 answers
Can't get AD and SMB to work from Azure to On-prem server
Hi, I'm working on a newly created Azure environment with very little networking set up. Our setups are as follows: Azure: Working S2S VPN Route table pointing to the on-prem subnet A VM for testing with an NSG allowing all traffic both inbound and…
asked 2024-07-23T11:56:54.92+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 87%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECJ%3C/text%3E%3C/svg%3E)
Chaiwon, James
20
Reputation points
commented 2024-07-23T12:28:15.27+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
2 answers
Best Methods for Diagnosing Azure Hosted Web App Communication Issues by Adjusting or Disabling Firewall Settings
Hi community, For a web app on Azure constructed using various Azure services, the design typically blocks a lot of communication for security reasons. However, to diagnose issues, it's necessary to allow inbound and outbound communication. I am…
asked 2024-07-21T13:16:22.1833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 68%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK6%3C/text%3E%3C/svg%3E)
KindCompute-6524
85
Reputation points
commented 2024-07-23T08:24:58.2366667+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
1 answer
Azure WAF is very restricting
Hi In our Azure config, we have an ApplicationGW+WAF in front of APIM. So all external requests pass through the WAF before routing towards APIM. The WAF (owasp rules) seem to be very very restrictive. We get a lot of blocked requests due to rule…
asked 2023-12-08T09:43:45.74+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 43%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDV%3C/text%3E%3C/svg%3E)
David Vanden Bussche
25
Reputation points
commented 2024-07-19T13:24:07.6033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 21%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Tony Daems
0
Reputation points
1 answer
Secure App service
We have several app services and its using access restrictions which lists all the blocked public IPs. Howevever, we want an efficient way to do blocking of IPs so im thinking of Azure Firewall will do the trick? Any suggestions? Thanks!
asked 2024-07-18T06:36:06.5666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 28.000000000000004%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPJ%3C/text%3E%3C/svg%3E)
Peter Johnson
0
Reputation points
commented 2024-07-18T10:53:20.2066667+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
1 answer
What is the subnet for *.msftauth.net and *.msftauth.net ?
The application under test has multi factor authentication enabled. This functionality is working as expected. We have recently created a virtual machine which will be used for running load tests. When we open the application from this VM in particular,…
asked 2024-07-17T19:46:20.79+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 19%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKC%3C/text%3E%3C/svg%3E)
Kar, Chirajeet
0
Reputation points
edited the question 2024-07-17T23:52:08.0866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marilee Turscak-MSFT
36,796
Reputation points Microsoft Employee
1 answer
I am unable to delete resources. The bill is showing in Free trial also.
I am unable to delete resources. The bill is showing in the free trial as well. I was unaware that a bill would be generated during a free trial. Please help me to delete the resources and help me to close the bill. I am not sure why the bill is showing.…
asked 2024-07-16T16:08:06.3466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 53%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERG%3C/text%3E%3C/svg%3E)
RAJAT GUPTA
0
Reputation points
commented 2024-07-17T19:07:16.33+00:00
RAJAT GUPTA
0
Reputation points
1 answer
Internet Routing via Azure Firewall
Hell All. We have a hub and spoke set up within Azure, within our hub resides our azure firewall and a express route gateway. The hub has 2 spoke vnets peered, each subnet within the peered vnet, has a UDR with a entry 0.0.0.0/0 pointing to the private…
asked 2023-09-01T07:11:19.8466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 50%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJK%3C/text%3E%3C/svg%3E)
jitesh k
0
Reputation points
edited a comment 2024-07-17T16:13:08.93+00:00
KapilAnanth-MSFT
43,211
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure Database Access from A Different Virtual Network
Dear Azure Team, I have an azure managed mysql database in virtual network vnet1 and a virtual machine in vnet2. I am unable to get this VM to access the database. I have a hub-spoke architecture with both vnet1 and vnet2 peered with my hub-vnet with…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 21%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESO%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Routing Issues with S2S VPN VNET Peered with ExpressRoute VNET
The Context: I have 3 VNETS (VNET1, VNET2, VNET3). VNET1 has a S2S VPN allowing on-prem devices to connect to Azure. VNET2 has an ExpressRoute allowing another subnet of on-prem devices to connect to Azure. VNET3 also has an ExpressRoute allowing another…
asked 2024-07-02T14:29:17.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 73%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER1%3C/text%3E%3C/svg%3E)
RahulRana-1085
30
Reputation points
accepted 2024-07-15T18:11:00.6866667+00:00
RahulRana-1085
30
Reputation points