Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
608 questions
1 answer
One of the answers was accepted by the question author.
Regarding Azure service tags for NSGs/Firewall
I am exploring Azure service tags and I have referred microsoft's official site for this. I have tested the service tag "Internet" using some azure resources, however need further documentation to know how to test service tags like azure load…
asked 2020-11-02T16:35:19.097+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 67%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Ananya Sarkar
311
Reputation points
accepted 2020-11-03T17:47:28.167+00:00
Ananya Sarkar
311
Reputation points
1 answer
One of the answers was accepted by the question author.
Builtin Azure Service that automatically updates the attack signature heuristically ?
Hi Experts, We have the need to secure the Application Gateway and hundreds of API exposed to the Internet as part of our production environment, Using the existing builtin, Azure services, How to make it secure from Unknown Threat or 0-day attack…
asked 2020-09-15T04:39:31.373+00:00
EnterpriseArchitect
5,136
Reputation points
commented 2020-10-06T05:32:04.21+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
View real time firewall logs?
what is the easiest way and/or best viewer to watch your real time network traffic through azure firewall and/or NSG's Log analytics/event hub? any way to just watch the traffic the way you would on a normal firewall with a connection monitor or at…
1 answer
One of the answers was accepted by the question author.
Ip spoofing attack in AKS
Hello, We are thinking to enable authorized IP ranges in aks to expose service only to my organisation. If we do not add application gateway or maximum we can add the small sku of app gateway then what are the chances that our service is safe from…
asked 2020-09-12T08:47:40.543+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 68%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
Tanul
1,251
Reputation points
commented 2020-10-01T08:18:21.83+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 98%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
AndyLiu-MSFT
586
Reputation points
1 answer
One of the answers was accepted by the question author.
Do i need Azure Firewall in Azure Virtual WAN (HUB)
I'm setting up a S2S connection through Azure Virtual WAN with no access to the outside world other than the 2 sites and some things within Azure that are not available from the Internet. I'm wundering if i need the Azure Firewall in this setup ?
asked 2020-09-08T12:46:03.973+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 17%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Jan Strunk Nielsen
21
Reputation points
accepted 2020-09-29T10:25:52.517+00:00
Jan Strunk Nielsen
21
Reputation points
0 answers
Azure firewall exclusion not working.
Greetings. I've got two Azure SQL servers/ databases, one for DEV and one for Prod. Each server has the same firewall rules set up. We have a developer that can access DEV w no problem, but cannot access Prod and it throws up the normal "your IP…
asked 2020-09-21T22:50:55.893+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 26%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
chrisrdba
381
Reputation points
commented 2020-09-23T09:41:39.517+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 97%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Anurag Sharma
17,586
Reputation points
1 answer
Any need of firewall if IP are restricted?
Hello, We are using azure kubernetes service over 443 port. We have enabled the IP range restricted Vnet due to which the services are only accessible from our organization. It is kind of an intranet and nothing is exposed over internet. In addition, a…
asked 2020-09-05T06:37:05.43+00:00
Tanul
1,251
Reputation points
commented 2020-09-18T19:58:45.52+00:00
prmanhas-MSFT
17,901
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Storage Account Firewall Options & Overall Security
I'm going through a stretch of final testing of our Azure environment, and recently, I had to change the firewall settings on the main storage account from Selected Networks to All Networks to allow Automate run books access to files. Still being fairly…
asked 2020-09-15T13:48:25.797+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 11%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EED%3C/text%3E%3C/svg%3E)
Erin Dempster
21
Reputation points
commented 2020-09-17T13:03:26.4+00:00
Erin Dempster
21
Reputation points
1 answer
Azure SQL Data Sync fails for bulk data
I'm using Azure Data Sync to synchronize two databases Everything was working fine until a few days ago when I inserted around 30 users in the Hub Database. Since then I'm getting the following error. Sync failed with the exception…
2 answers
One of the answers was accepted by the question author.
ARM Deployment of IPGroups fails on Update: Conflict
Hello, we are trying to update IPGroups through an ARM deployment, but this fails with "Conflict" on some of the IPGroups. All resources included in the discussion are created via DevOps pipeline and ARM templates. Unfortunately, rerunning a…
asked 2020-07-17T09:32:30.287+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 25%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECD%3C/text%3E%3C/svg%3E)
Christoph Distefano
101
Reputation points
accepted 2020-09-01T16:07:24.157+00:00
Christoph Distefano
101
Reputation points
1 answer
One of the answers was accepted by the question author.
Unable to connect to Azure SQL DW & DB via SSMS, SSDT - error 10060
Hi, I'm trying to connect to Azure SQL Data Warehouse via SSMS and SSDT from my local with SQL Authentication and AD universal MFA, but I'm unable to and getting error number 10060 (Connected host failed to respond ). I've added my client IP to…
asked 2020-08-05T16:25:52.757+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 21%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENP%3C/text%3E%3C/svg%3E)
Neil Pereira
81
Reputation points
accepted 2020-08-26T16:15:13.157+00:00
Neil Pereira
81
Reputation points
2 answers
One of the answers was accepted by the question author.
Cannot bulk load because the file 'container' + file' could not be opened. Operating system error code (null).
I am not sure what is going on with this quation body it keeps nagging that there need to be at least 10 characters inside this body..... Loading a file from the Azure Blob storage should be relatively easy when you are working with a Azure SQL…
asked 2020-07-14T08:00:31.357+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 79%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJW%3C/text%3E%3C/svg%3E)
Jacobus Wooning
41
Reputation points
commented 2020-08-13T00:49:27.957+00:00
Mike Ubezzi
2,776
Reputation points
1 answer
Are webservers behind a WAF safe enough to be classed as trusted
Hi, I am after some advise on a hub and spoke design idea. If I have a hub that contains a firewall and a WAF where the WAF is forwarding traffic onto a webserver in a spoke virtual network. Would you then class that web server / virtual network as…
asked 2020-07-02T09:45:56.727+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 72%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Dan
176
Reputation points
commented 2020-08-04T12:52:52.677+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
1 answer
How to take the Network Security Group(NSG) logs to Azure Sentinel
Hello, I have Azure Sentinel, Kindly suggest the steps how to forward the NSG(Azure Firewall) logs to Sentinel. Regards, Chandan Prajapati
asked 2020-07-18T19:15:54.85+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
commented 2020-07-30T23:00:48.757+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marilee Turscak-MSFT
36,336
Reputation points Microsoft Employee
2 answers
I would like to opent port25, how can we do that?
Hello, I would like to request start using email service over my azure VM since I already learned about services like Sendgrid and Mailjet I am interested for now on azure email service that means unblocking port25 that i can test sending email in my…
asked 2020-07-25T13:08:03.317+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 26%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYE%3C/text%3E%3C/svg%3E)
Yasser El Attar
1
Reputation point
answered 2020-07-28T02:41:27.83+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
1 answer
Azure VM Ubuntu FTP port 21 issue.
Azure VM Ubuntu FTP port 21 not get open after Azure VM networking inbound port rule. We unable to upload hosting files. please support.
asked 2020-07-18T11:24:10.167+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 64%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIM%3C/text%3E%3C/svg%3E)
IT MANAGER
1
Reputation point
commented 2020-07-22T04:04:59.343+00:00
Manu Philip
17,351
Reputation points MVP
2 answers
Nsg Log to Sentinel
Hello, Can any one provide me the exact process/Docs/link for how to enable Azure Firewall(NSG) to Sentinel. Or how to see the (Azure Firewall) NSG logs in Sentinel. Thanks Rohit
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 8%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
1 answer
What is not working across two different Azure Subscriptions?
Hi People, We have multiple different objects spread across multiple different Azure Subscriptions like below: Development-AzSubscription ApplicationGateway\AppGW-Dev1 ApplicationGateway\AppGW-Dev2 ... Testing-AzSubscription …
asked 2020-07-13T06:29:40.767+00:00
EnterpriseArchitect
5,136
Reputation points
commented 2020-07-20T10:54:59.537+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
3 answers
One of the answers was accepted by the question author.
Azure WAF multiple Geo Location Custom Rules
Hi, I have an Azure Application Gateway V2 pointing at a new WAF custom Policy. In this custom policy I have added a single custom rule to deny access from certain countries. I have about 15 countries I want to allow access and deny all the other…
asked 2020-06-28T16:33:37.743+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 25%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJA%3C/text%3E%3C/svg%3E)
Jason A Clark
31
Reputation points
answered 2020-07-19T08:17:46.917+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 40%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Danejahtt
1
Reputation point
3 answers
One of the answers was accepted by the question author.
Basic networking qu with Azure Firewall and load balancer
I have an Azure Firewall and a public load balancer in the same VNet. I have a basic question on how the traffic gets into the VNet in this scenario. If I have an external source that has been given the public IP address of the load balancer – does…
asked 2020-07-08T09:20:32.393+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 74%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
mij2020
366
Reputation points
commented 2020-07-17T09:52:37.723+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 88%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sebastian-Daniel Negoescu
1
Reputation point