Azure Firewall upgrade and preservation of public IP

Question

Hello!

I have a question about upgrading the SKU of Azure Firewall. If I change from Standard to Premium using "Azure Firewall easy upgrade/downgrade", will the public IP that is added to the Secured Virtual Hub still be preserved? Thank you.

Answer 1

Hello @Sheik Mohamed Yasar ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you would like to know if upgrading the Azure Firewall SKU from Standard to Premium using the "Azure Firewall easy upgrade/downgrade" feature, preserve the public IP of the firewall.

I reached out to the Azure Firewall Product Group team and below is their response:

The easy upgrade feature will try to preserve the Public IP with a very high probability, but it is not 100% guaranteed.

You can refer the below blog written by the Azure Firewall PG with additional information on the Azure Firewall easy upgrade/downgrade feature:

https://techcommunity.microsoft.com/t5/azure-networking-blog/announcing-azure-firewall-upgrade-downgrade-general-availability/ba-p/3847148

But if you use the manual Allocate/Deallocate method to migrate your Firewall SKU to Premium, it will preserve the firewall public IP address.

Refer: https://learn.microsoft.com/en-us/azure/firewall/premium-migrate#migrate-azure-firewall-using-stopstart

Kindly let us know if the above helps or you need further assistance on this issue.

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.