Share via

Azure Firewall in VWAN Public IP

Trent Becker 31 Reputation points
2024-07-17T13:27:27.7466667+00:00

Hello!

I currently have deployed a secured VWAN with an Azure Firewall. I am wanting my P2S VPN to come out as a static IP. I have 1 Public IP allocated to the Azure Firewall. However, I am not sure if these are Static or if they can change without notice. Is anyone aware if these IP's can change or not? I am having trouble finding any documentation pertaining specifically to Azure Firewall as part of the VWAN deployment.

I would just attach a NAT Gateway to the Azure Firewall network, but that is not supported for Azure FIrewalls with a VWAN.

Azure Virtual WAN
Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
201 questions
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
607 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,287 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ChaitanyaNaykodi-MSFT 24,486 Reputation points Microsoft Employee
    2024-07-17T21:53:52.5633333+00:00

    @Trent Becker

    Thank you for reaching out.

    I understand you wish to know that the public IP address associated with the Azure Firewall in your secured VWAN hub is a static IP address.

    Yes, the IP address associated with the Azure Firewall is static IP address.

    In Azure public IP address can be created in two different SKU Standard and Basic. More details on IP address SKU here

    Standard SKU IP address is a static Public IP.

    User's image

    As documented here Azure Firewall supports Standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported.

    Hope this helps! Please let me know if you have any additional questions. Thank you!

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.