Planning and Procedures for deploying Azure Firewall best practice?

EnterpriseArchitect 5,376 Reputation points
2020-11-04T12:28:06.28+00:00

People,

I need some help in planning and deploying Azure Firewall.
What's the best practice and the steps to configure it properly for multi-region deployments to protect workload like:

  • Azure VMs
  • Azure API
  • Web Application

Thanks in advance.

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
666 questions
Azure Firewall Manager
Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
92 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. suvasara-MSFT 10,041 Reputation points
    2020-11-04T13:08:43.09+00:00

    @EnterpriseArchitect , Azure Firewall can be deployed in a central virtual network and peer other virtual networks to it in a hub-and-spoke model. You can then set the default route from the peered virtual networks to point to this central firewall virtual network. Global VNet peering is supported, but it isn't recommended because of potential performance and latency issues across regions. For best performance, deploy one firewall per region.

    The advantage of this model is the ability to centrally exert control on multiple spoke VNETs across different subscriptions. There are also cost savings as you don't need to deploy a firewall in each VNet separately.

    37360-image.png

    ----------

    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

    0 comments No comments

  2. suvasara-MSFT 10,041 Reputation points
    2020-12-04T09:24:28.677+00:00

    @EnterpriseArchitect ,

    If you think your question has been answered, click "Mark as Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.


    Best regards
    Subhash

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.