Thank you for reaching out.
I understand you are facing issues with IIS website deployed behind an Azure Firewall.
In troubleshoot connectivity issue with Azure Firewall. It is recommended to enable structured diagnostic logging for the Azure Firewall as described here. Azure Firewall's structured logs provide a more detailed view of firewall events. They include information such as source and destination IP addresses, protocols, port numbers, and action taken by the firewall. They also include more metadata, such as the time of the event and the name of the Azure Firewall instance.
You can refer to this documentation for queries .
You can query the
- Network rule log - Contains all Network Rule log data. Each match between data plane and network rule creates a log entry with the data plane packet and the matched rule's attributes.
- Application rule log - Contains all Application rule log data. Each match between data plane and Application rule creates a log entry with the data plane packet and the matched rule's attributes.
This will give you more information on if any specific Network Rule or Application Rule blocking the connectivity.
Kindly let us know if the above helps or you need further assistance on this issue.
---Please "Accept the answer" if the information helped you. This will help us and others in the community as well.