Azure Firewall Rule Conf

alsavi1984 21

Hi,

I have questions about network rule creation as I have doubts about it.

Which type of source addresses are allowed? Could I configure different ip address separated with commas, different CIDR ranges or a mixture of its?

Then in the Destination Addresses field could I use a mixture of CIDR nets and Ip addresses?

I will be very grateful If you could help with it.

Thanks

2 answers

suvasara-MSFT 10,056 Reputation points

2021-09-29T07:57:49.453+00:00

@alsavi1984 , Yes, you can configure a single IP address or IP's separated with commas. Incase of adding address range you can select IP group option. An IP Group can have a single IP address, multiple IP addresses, or one or more IP address ranges.

The following IPv4 address format examples are valid to use in IP Groups:

Single address: 10.0.0.0
CIDR notation: 10.1.0.0/32
Address range: 10.2.0.0-10.2.0.31

Note: IP Groups are not currently available in Azure national cloud environments.

The same goes with destination address field as you have option to select IP group.

Reference Doc

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
alsavi1984 21 Reputation points

2021-09-29T13:41:26.223+00:00

Thank you Suvahara.

My question was related about using different single ips plus network ranges. I think it is possible.

The problem here it's about creating more than 100 hundreds ipgroups. I will expect that MSN could solve it.

Kind Regards
Please sign in to rate this answer.
suvasara-MSFT 10,056 Reputation points

2021-09-29T14:54:25.413+00:00

@alsavi1984 , Yes, as of today you cannot directly enter address ranges in the input field instead you need to create IP groups separately. We appreciate your feedback/suggestion/feature request and will take it to the respective backend team for future releases.

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

alsavi1984 21 Reputation points

2021-09-29T15:54:14.877+00:00

Hi again,

II confused about your last question sorry. I apologize but I need to clarify this info.

Regarding to MSN doc I will paste related screenshot about it when we configure network rules. So in Source adress we could configure (as an aexample 10.5.6.4,10.6.7.0/24 together)

Then in destination adress we could put commas to separate ips, network ranges as 10.X.X.X/24 or putting together.

So, are you talking that starting today, MSN will apply this change and we cannot put adress ranges in firewall rules? Could we use as example 10.5.4.0/20 instead of it.?

Im very confused Im sorry

suvasara-MSFT 10,056 Reputation points

2021-09-29T16:47:07.107+00:00

@alsavi1984 , My bad. Apologies. Yes, you will be able to enter that IP combination in the fields. Previously it is not possible. But now Azure is allowing that.

suvasara-MSFT 10,056 Reputation points

2021-10-12T10:29:53.197+00:00

Greetings,

If you think your question has been answered, click "Mark as Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Firewall Rule Conf

2 answers

Your answer