This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 69%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHK%3C/text%3E%3C/svg%3E)
I want to add additional security for my azure web app through IPS and IDS.
Wanted to know if we have any solution in azure? -
Does Azure Firewall has capability for IPS and IDS?
Any suggestion if thirdparty tool or service needs to be used?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
@Harshal Kothavade
Please let us know if you still have any further issues and we will be glad to assist you further.
Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.
Hi,
Azure Firewall offers IPS/IDS. There is also official recommendation from Azure Security Center about this. From that doc you can even find a link to third party solutions you can integrate within Azure. Azure WAF is also used for web applications.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thanks for your quick reply.
I have gone through IPS and IDS of Azure Firewall but we need Payload inspection facility.
I am also looking for suggestion on third party IPS/IDS solution with payload inspection functionality.
If anyone have used or based on past experience wants to recommend ...
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 23%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Full disclosure - I am employed by Fortinet - which just happens to offer a NGFW with extensive filtering including intrusion detection and/or prevention based on payload inspection. We are also the Microsoft Commercial Marketplace Partner of the year. You can take a look at our offerings here (start with the FortiGate listing):
https://azuremarketplace.microsoft.com/en-us/marketplace/apps?page=1&search=fortinet&filters=partners
As mentioned, Azure does not do intrusion detection and/or prevention based on payload inspection. You could use something like Sophos Firewall that does payload inspection. Here is the link for the same in Azure Marketplace- https://azuremarketplace.microsoft.com/en-us/marketplace/apps/sophos.sophos-xg-firewall-solution?tab=overview.
Please let us know if you have further questions/concerns. Thank you!