Share via

Azure IP Group - nested groups

Dushyant Priyadarshee 121 Reputation points
2022-12-21T10:27:33.16+00:00

Is there a way to add an Azure IP Group to an existing IP Group? Like a nested group.

Say groups such as
DevIps with members 1.2.3.0/24
TestIps with members 1.2.4.0/24
ProdIps with members 1.2.5.0/24

can be a member of
AllOfficeIps group. So AllOfficeIps will have members DevIps, TestIps, ProdIps (and not the IPs directly).

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
581 questions
Azure Firewall Manager
Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
85 questions
0 comments
Accepted answer
  1. GitaraniSharma-MSFT 48,011 Reputation points Microsoft Employee
    2022-12-21T12:53:11.23+00:00

    Hello @rubberduckdev ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you would like to know if there is a way to add an Azure IP Group to an existing IP Group like a nested group.

    As of today, an IP Group can have a single IP address, multiple IP addresses, one or more IP address ranges or addresses and ranges in combination. But not another IP Group.
    Refer : https://learn.microsoft.com/en-us/azure/firewall/ip-groups

    I checked with the Azure Firewall Product Group team and looks like Nested IP groups is currently not in the roadmap but is being considered for future improvement as we've received same feedback from other customers.

    I'll raise an internal feedback item for this feature and route it to the Product Group team and would also request you to leave your feedback in the below forum requesting this feature. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.
    https://feedback.azure.com/d365community/forum/8ae9bf04-8326-ec11-b6e6-000d3a4f0789

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JimmySalian-2011 41,926 Reputation points
    2022-12-21T13:12:33.823+00:00

    Hi Rubber,

    I am not entirely sure that is the correct way to do the IP Grouping and not sure if it will work and achieve the end result, however I will suggest you to provide a product feedback over here if that is possibility? 8ae9bf04-8326-ec11-b6e6-000d3a4f0789

    Hope this helps.
    JS

    ==
    Please Accept the answer if the information helped you. This will help us and others in the community as well.

    0 comments