regarding 1): NSGs are a part of the virtual network configuration. NSGs are Azure Resources ... but I am not sure to call a NSG a PaaS service.
regarding 2): In which context is the statement of a "centralized Firewall deployment"?
----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten