Hello! I currently have deployed a secured VWAN with an Azure Firewall. I am wanting my P2S VPN to come out as a static IP. I have 1 Public IP allocated to the Azure Firewall. However, I am not sure if these are Static or if they can change without notice. Is anyone aware if these IP's can change or not? I am having trouble finding any documentation pertaining specifically to Azure Firewall as part of the VWAN deployment. I would just attach a NAT Gateway to the Azure Firewall network, but that is not supported for Azure FIrewalls with a VWAN.

@Trent Becker Thank you for reaching out. I understand you wish to know that the public IP address associated with the Azure Firewall in your secured VWAN hub is a static IP address. Yes, the IP address associated with the Azure Firewall is static IP address. In Azure public IP address can be created in two different SKU Standard and Basic. More details on IP address SKU here Standard SKU IP address is a static Public IP. As documented here Azure Firewall supports Standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported. Hope this helps! Please let me know if you have any additional questions. Thank you! Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Azure Firewall in VWAN Public IP

Accepted answer

ChaitanyaNaykodi-MSFT 26,216 Reputation points Microsoft Employee

2024-07-17T21:53:52.5633333+00:00

@Trent Becker

Thank you for reaching out.

I understand you wish to know that the public IP address associated with the Azure Firewall in your secured VWAN hub is a static IP address.

Yes, the IP address associated with the Azure Firewall is static IP address.

In Azure public IP address can be created in two different SKU Standard and Basic. More details on IP address SKU here

Standard SKU IP address is a static Public IP.

As documented here Azure Firewall supports Standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported.

Hope this helps! Please let me know if you have any additional questions. Thank you!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

1 person found this answer helpful.
Trent Becker 71 Reputation points

2024-07-18T12:26:14.1733333+00:00

Hi Chaitanya,

I appreciate the response! I believe what you are referring to is a regular Azure Firewall. When you use and Azure Firewall as part of a secured hub VWAN it does not allow adjusting the public IP's. They are generated automatically and all you can do is select to generate more IP's or delete the current ones.

Regular Azure Firewalls do allow you to select public IP's and manage them, but as part of a secured hub in a VWAN you can only manage the firewall as part of the hub management so the options are different.

If you have any other suggestions I would love to hear them!

Thanks!

ChaitanyaNaykodi-MSFT 26,216 Reputation points Microsoft Employee

2024-08-02T23:59:21.33+00:00

@Trent Becker

Thank you for getting back and apologies for the delay here.

When you use and Azure Firewall as part of a secured hub VWAN it does not allow adjusting the public IP's. They are generated automatically and all you can do is select to generate more IP's or delete the current ones.

Yes this is correct. When you deploy a secured WAN hub a Azure firewall is deployed in backend which is managed by Azure.

As this is a managed Azure Firewall resource which inherently does not support Dynamic Basic SKU, the IPs generated should be static IP address (Standard SKU public IP address). Let me just confirm this with the team and get back to you here.

Upon further research I still have not found any documentation stating is these generated IPs are static or not.

Based on a response I get from the team I will add a note about it in this section here.

Thank you!

ChaitanyaNaykodi-MSFT 26,216 Reputation points Microsoft Employee

2024-08-03T00:39:35.6533333+00:00

@Trent Becker

I got a response back from the team.

While deploying the firewall in a vWAN, you must specify the number of Public IPs you would like to create on the firewall. Once the firewall is created, the Public IPs remain static.

I will work on adding a note about it in this section here.

Hope this helps! Please let me know if you have any additional questions. Thank you!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Trent Becker 71 Reputation points

2024-08-05T12:14:48.03+00:00

I really appreciate you getting confirmation on this! Thanks so much!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Firewall in VWAN Public IP

0 additional answers

Your answer