Want to route on-prem traffic to internet through azure firewall
We want to route on-premises traffic to the internet through Azure Firewall. For that, we have deployed an ExpressRoute connection between on-premises and Azure. Now we are trying to route the traffic from the GatewaySubnet to the firewall by defining a…
Azure Firewall
how to get effective routes from azure firewall in vhub
Hello! How to get effective routes from azure firewall in vhub? previously it was available in the portal vhub->effective routes -> dropdown "Choose resource type" -> Azure Firewall pls see the screenshot. Now resource type Azure…
Azure Firewall
migration option for availability zone / Zone redundancy has been released or available
Could you please confirm if the migration option for availability zone / Zone redundancy has been released or available, allowing us to retain the existing public IP address (Microsoft managed) for the Azure Firewall within the Secure Hub setup We…
Azure Firewall
Azure Security Architecture Design - Need Expert Guidance
Azure Security Architecture Design - Need Expert Guidance Hi, I'm designing a secure architecture for a web application hosted on Azure Kubernetes Service (AKS) and would appreciate insights on my current design and some specific questions I…
Azure Firewall
How to configure AZFWFlowTrace logs on Azure Firewall (Basic SKU) to debug Asymmetric routing
Hi, I have created a azure firewall on a VNET and i am trying to debug an issue related to asymmetric routing, The scenario is a P2SVPN trying to communicate with a SQL Server (via private endpoint), the P2SVPN is in a hub vnet and the SQL Server is in…
Azure Firewall
Azure App Service (Next.js + NextAuth) returns 403 when calling Azure AD B2C after VNet Integration and NAT Gateway
I’m facing a 403 Forbidden error when my Next.js frontend application (using NextAuth) calls Azure AD B2C, even though all authentication configurations appear to be correct. Application Setup Frontend: Next.js Authentication: NextAuth.js Identity…
Azure Firewall
how to allow my IP to access the RDP using port 3389
our customer who is using our software asked us to block RDP access to the server from anywhere, as a part of their security measurements, the step i took was to allow secured access to the server only on port 3389, so now the RDP is not accessible from…
Azure Firewall
How to get detailed historical azure firewall logs containing packet send and receive alongwith session end reason
I need to check two months logs of azure firewall network rules for some assessments which includes packet send receive and session end reason. Please let me know if anyone did this and can guide me .
Azure Firewall
Azure Firewall Policy blocks Azure CDN dependencies required for Azure AD authentication (AAD login works, dependent CDN endpoints blocked)
We have deployed Azure Firewall with a Firewall Policy to restrict outbound Internet access from a VM subnet while allowing only Azure AD (Entra ID) authentication traffic and required Microsoft dependencies. Although authentication endpoints…
Azure Firewall
Can we have dedicated internet link on azure firewall or any other way ?
Can we have dedicated internet link on azure firewall with specific any bandwidth
Azure Firewall
Interception rule issues
The firewall intercepts some normal data to the specified path. How can I retrieve the request before the interception?So that we can add corresponding rules
Azure Firewall
Not able to Access Company website on Azure Virtual Machine
Hi, Our company websites cannot be accessed from our Azure Virtual Machine, but the same websites open normally from my local PC. When I am trying to access from VM, it's been blocked or facing timing out issue . The VM is using a dynamic public IP. What…
Azure Firewall
Azure Firewall DNAT – Source Public IP Not Preserved (Getting SNATed by Firewall)
Facing an issue where the original client public IP is not preserved after traffic passes through Azure Firewall DNAT. Environment / Flow Client → Internet → Azure Firewall (DNAT + Network Rule) → DMZ Subnet NSG → DMZ Server → Response →…
Azure Firewall
Deployment of Firewall ends with Provisioning state 'Failed'
I am having a hub/spoke network architecture. Whenever I tried provisioning Azure Firewall, it will go into a Failed state. And it seems like the only way to resolve this is to add a route table to it and configure a 0.0.0.0/0 route to the Internet. My…
Azure Firewall
Need to find Top talkers from Azure Firewall network Logs
I want a KQL query and configuration settings which can give me Azure firewall network rule logs with column having details for SentBytes and received bytes details for each packet.
Azure Firewall
Route table and Azure firewall
Hi. I have the following topology and I am trying to understand how to I view in the Azure. I am sure I am missing something. I would appreciate if someone could help me. On pre > MPLS > Cloud Router > Express route > Gateway Subnet >…
Azure Firewall
Client -> Azure firewall -> WAF + Application gateway (Downstream traffic)
Hi Azure firewall team / community, We have setup of NS ingress traffic from internet to our cloud system as below. Client → Azure Firewall (Public IP, DNAT) → Application Gateway (WAF) → Web App (Private Endpoint) Challenge:- App team needs WAF custom…
Azure Firewall
TLS Inspection causes error when used with internal web server: ''Error message 'x509: certificate signed by an unknown authority' displayed when using TLS Inspection with internal web server''
Question: When attempting to connect to a private, internal web server with a private certificate (signed by our internal CA) through a rule with TLS Inspection enabled, the browser displays the error message 'x509: certificate signed by an unknown…
Azure Firewall
Azure Firewall Logs Not Appearing in Log Analytics Workspace
I have created a Premium SKU Azure Firewall, a public log analytics workspace (LAW) and a storage account in the same resource group and region. I have added a diagnostic setting for the firewall, which should send logs to my LAW and the storage account.…
Azure Firewall
Does Azure Firewall See Original Client IP When Using Azure Front Door ?
Is it useful to block original client IPs at Azure Firewall when Azure Front Door is in front of it ? Client → Azure Front Door → Azure Firewall → backends.... In this design, Azure Front Door is the public entry point. The traffic then goes to Azure…