Inbound Service tags in Firewall rules not avalable in portal

Question

we have a service bus configured in vnet using private endpoint.

We are creating D365 plugins which will publish to a topic in the service bus.

Since D365 is in MSIT. We require to allow the inbound for that traffic.

So, planning to enable firewall in the vnet and add rule for bypassing the service tag "PowerPlatforPlex / Infra".

While adding rules I see that, for Source, service tag option is not available.

Can we somehow add the rule to allow inbound for service tags?

Answer 1

Hello @Kunal Tanti ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you would like to know if you can add the service tags "PowerPlatformPlex/Infra" in the Azure Firewall rules.

As mentioned in this doc,

Service tags are usable in Azure Firewall rules as a destination rule only for inbound or outbound traffic.

As of today, Azure Firewall service tags can only be used in the network rules destination field and not in the source field.
Refer : https://learn.microsoft.com/en-us/azure/firewall/service-tags

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.