Azure Firewall Policy Analytics
hello, Why on firewall policy analytics we cannot see any denied action? Is the default deny policy on azure firewall is not captured?
![](https://techprofile.blob.core.windows.net/images/zCxR1gzTUkeGX5-wM6PGoA.png?8DB52A)
Azure firewall - Firewall policy under "Policy" section is not showing any "Parent policy".
As a test, we have deployed Azure Firewall in a region. When I access the firewall, it has 2 Firewall policy (1- Policy and 2- Base Policy). My understanding is that Base Policy is considered as a Parent policy and just Policy is considered as a child…
Problem with connecting Azure Files from container when using Azure Firewall
Hello, I have a problem with Azure container and a firewall. This container needs to access Internet, Azure Files (SMB) and Azure SQL database. If I start the container without any firewall configuration, it works without problems (except I cannot access…
Changes coming to the Azure Update Delivery service tag
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/changes-coming-to-the-azure-update-delivery-service-tag/ba-p/4156552 We recommend switching from using service tags (like AzureUpdateDelivery and AzureFrontDoor.FirstParty) to application…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
How to block all geographic region and only allow specific regions to reach my Azure APIM ?
I have deployed multiple API Management Services (APIM) in my Azure Subscriptions. According to Application Insight, this APIM is hit or maybe attacked by a few thousand requests from around the world daily which my company and product do not have…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
ICMP Timestamp Request Remote Date Disclosure Details - The remote host answers to an ICMP timestamp request.
how to resolve this or do we have any information if we can restrict on firewall
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Azure Hub Network with NVA and azure firewall and routing between VPN and Express route gateway through firewalls
Hi Team, I have attached the network diagram, Here is set up. There is HUB and Spoke topology with NVA. All traffic between on-premise and azure spoke is passing through NVA Third party location is connected through SDWAN VM over internet. SDWAN VM is…
Azure Firewall has started NATing random traffic flows between VMs
Our monitoring system found a web site not responding last Saturday morning (24th August). Logs showed that it could no longer talk to its database. The web site is running on a VM -- VM1. The SQL Server is on VM2. They are on different subnets of the…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
how do i find in azure firewall who has deleted a specific firewall rule
Please help - how do i find in azure firewall who has deleted a specific firewall rule Thank you
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Azure Storage Account - Public Access via Azure Front Door Endpoint - Firewall Setting
Hi, I have a storage account static website being accessed via Azure FrontDoor. It works well with "Public network access" option set to "Enabled from all networks". If I set it to "Enabled from selected VNETs and IPs" I'll…
Azure Firewall and Inbound Filtering documentation
Hi! I have a question about the Azure Firewall documentation and the Knowledge Check section. The documentation (although it does not explicitly say otherwise) focuses on the fact that the Azure Firewall service is not suitable for filtering inbound…
Deployment of Firewall ends with Provisioning state 'Failed'
I am having a hub/spoke network architecture. Whenever I tried provisioning Azure Firewall, it will go into a Failed state. And it seems like the only way to resolve this is to add a route table to it and configure a 0.0.0.0/0 route to the Internet. My…
Internet Access Issue on macOS with Azure Virtual WAN Point-to-Site VPN whilst working for Windows
We are experiencing an issue with internet connectivity when using the Azure VPN client on macOS to connect to a Virtual WAN Point-to-Site (P2S) VPN gateway. Issue Details: Environment: Virtual WAN with Point-to-Site VPN gateway configured for forced…
VNETs in different subscriptions not communicating with Azure Firewall
Having a head scratcher. Layout: Subscription 1: Includes: VNET A, VPN Gateway to Data Center, Firewall with Policy. Subscription 2: Includes: VNET B, computer Resources Spinning up a VM in VNET A I can communicate out and to the Data Center through the…
Subnet association to firewall
All of my Azure VM use one subnet, and if this subnet associated to the azure firewall can i exclude some VMs to not use the firewall?
![](https://techprofile.blob.core.windows.net/images/zCxR1gzTUkeGX5-wM6PGoA.png?8DB52A)
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
AZFW DNS proxy across virtual wan
I have configured the azfw policy for dns proxy to a server that is on-prem accessible through another virtual hub. My problem is bgp is not advertising the firewall's private address across the vwan to the other hub. The firewall policy in question…
Routing Azure VPN P2S connection through Azure Firewall for S2S connection
Hi all, I am setting up an IoT configuration where the devices connect via SIMs to a mobile provider. The mobile provider forwards all traffic through a S2S VPN connection. Using a route table I am able to forward all traffic to an Azure Firewall. The…
![](https://techprofile.blob.core.windows.net/images/lVwN1wAAAwAAAAAAAAAAAA.png?8DCAFC)
Azure VWAN traffic between source and destination worked in HUB but did not work when the hub became secure with Azure Firewall.
Hi Experts, Please see the attached ENV diagram; when the VWAN does not have a firewall, traffic from siteA to App01 works, and vice versa; however, once the firewall is installed in the HUB with the allow all FW policy, communication from siteA to App01…
Azure Firewall Application Rules - "MSSQL" not available in Rule Collection Groups
Hi, Working on a IaC project for Azure Firewall. Have created Azure Firewall, Azure Firewall Policy and working on implementing rules using Rule Collection Groups modules. In the Portal, Application Groups support protocol type "http",…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Configuration of an external firewall + ExpressRoute
Hello Community, I read a few threads here in the forum about a similar case, but the answer wasn't 100 percent clear to me. The following structure: I have an ExpressRoute via a VPN gateway in Azure, which is connected to OnPrem. An NVA (not from…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)