Azure Firewall Application Rules - "MSSQL" not available in Rule Collection Groups

@Tarjei Ylvisåker ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to know why "Mssql" is not listed under the Rule Collection Group module of Azure Firewall Policy

I just did a lab with Terraform and I was successfully able to use "Mssql".

resource "azurerm_resource_group" "fwrg" {
  name     = "fwrg2"
  location = "West Europe"
}

resource "azurerm_firewall_policy" "fwpolicy" {
  name                = "fwpolicy"
  resource_group_name = azurerm_resource_group.fwrg.name
  location            = azurerm_resource_group.fwrg.location
}

resource "azurerm_firewall_policy_rule_collection_group" "rcg" {
  name               = "rcg"
  firewall_policy_id = azurerm_firewall_policy.fwpolicy.id
  priority           = 500

  application_rule_collection {
    name     = "app_rule_collection1"
    priority = 500
    action   = "Deny"
    rule {
      name = "app_rule_collection1_rule1"
      protocols {
        type = "Mssql"
        port = 1433
      }
      protocols {
        type = "Http"
        port = 1234
      }
      source_addresses  = ["10.0.0.1"]
      destination_fqdns = ["*.microsoft.com"]
    }
  }
    
  }

NOTE :

• The "protocols" does not take any random values, it in face verifies if you input on of the three : ["Http","Https","Mssql"]
• See :
  • 
• However, you can use non standard ports without any issues.

Looks like the documentation is not updated, I shall reach out to internal teams to get the documented up to date

Meanwhile, please let us know if we can be of any further assistance here.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.