Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
3 answers
troubleshooting an Azure SDN Connector issue on a FortiGate HA cluster running in Azure.
I've gotten timeout: 2026-10-24 11:16:47 azd connection timeout: 169.254.169.254:80:169.254.169.254 2026-10-24 11:16:47 azd curl retry 2026-10-24 11:17:02 azd connection timeout: 169.254.169.254:80:169.254.169.254 2026-10-24 11:17:02 azd curl…
Azure Firewall
asked
2026-10-24T09:36:31.2866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 25%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDT%3C/text%3E%3C/svg%3E)
Dimitrov, Todor
0
Reputation points
recommended
2026-11-10T08:27:53.3+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 22%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
JuliaMarvin
24,175
Reputation points
Volunteer Moderator
1 answer
Azure Firewall: Intermittent Traffic Drops During DNAT Path — Investigation and Troubleshooting
Problem description I am experiencing intermittent connection drops on web traffic flowing from an Application Gateway through Azure Firewall to IIS backend servers via DNAT. About 10% of connections are being dropped, leading to TCP retries and page…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-11-06T01:36:00.7533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 47%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Chris Machemer
0
Reputation points
edited a comment
2026-11-09T06:58:58.2433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 46%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
Jack thomas
0
Reputation points
1 answer
Azure Internal LB used as next hop
I'm using an internal Standard Load Balancer in front of a single NVA, with the frontend IP used only as a UDR next hop (never as the packet's destination). SETUP Two peered spoke VNets. Each spoke subnet has a UDR 0.0.0.0/0 with next hop type…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-11-04T16:16:25.0666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 92%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Peter Stieber
130
Reputation points
edited an answer
2026-11-04T16:26:23.03+00:00
James Gamble
340
Reputation points
2 answers
Unable to use Azure services after changing Public Network Access from "All networks" to "Selected IP addresses
I'm able to use access the Azure resources like Storage account, search service when Network setting is public. But after changing Public Network Access from "All networks" to "Selected IP addresses," I am unable to access any of the…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-30T08:55:46.2466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 8%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKA%3C/text%3E%3C/svg%3E)
KUMAR Aashu (CA)
0
Reputation points
edited an answer
2026-11-01T00:09:40.6366667+00:00
TP
165.6K
Reputation points
Volunteer Moderator
1 answer
Is there an API to read the Azure Firewall Policy “Unique source/destination” count shown in Policy analytics?
Hi, In the Azure portal, Firewall Policy → Policy analytics → Insights shows a “Policy limits” card with the number of rules, “Unique source/destination” (out of 20,000 max) and IP groups. Our questions: Is there any REST API, SDK call, Resource Graph…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-29T08:44:55.5666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 57.99999999999999%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDF%3C/text%3E%3C/svg%3E)
Dvora Fridman
0
Reputation points
answered
2026-10-29T08:46:36.9833333+00:00
AI answer
6 answers
On-prem to spoke via Azure Firewall (hybrid hub-and-spoke) facing Asymmetric routing issue
Issue is ping is working fine from Onprem to Spoke but application traffic like 443/3389 etc not working. If i remove UDR from Gateway Subnet and UDR from Spoke Subnet and all working fine. Suspecting issue with Asymmetric Routing but not sure how to…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-09T11:34:24.32+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 60%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sandeep Darak
0
Reputation points
answered
2026-10-22T11:08:03.29+00:00
Sandeep Darak
0
Reputation points
2 answers
Azure VPN Gateway: IKEv2 Phase 1 rekey fails with 0x363A — Max number of established MM SAs to peer exceeded
We are experiencing recurring IKEv2 Phase 1 rekey failures between an on-premises OPNsense HA firewall pair (strongSwan) and Azure VPN Gateway. The tunnel establishes successfully, and Phase 2 CHILD_SAs generally rekey without issues. However, during…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-16T14:00:01.23+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 85%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDO%3C/text%3E%3C/svg%3E)
Dan Oprita
0
Reputation points
answered
2026-10-18T21:47:22.72+00:00
kagiyama yutaka
5,755
Reputation points
2 answers
Azure Firewall - High SNAT Port Utilization
Observing high SNAT port utilization on Azure Firewall and would like to understand whether Azure Firewall’s built-in auto-scaling can help resolve the issue. As I understand it, Azure Firewall has a minimum of two instances, and a single instance can…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-05T18:43:37.17+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 4%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
$@chin
385
Reputation points
edited a comment
2026-10-17T10:45:27.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 50%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
SHOUMIK CHAKRAVARTY
1,455
Reputation points
2 answers
Azure Firewall Standard fails in one availability zone in East US 2 but deploys in another
We are deploying Azure Firewall Standard with a firewall policy in East US 2 and are seeing zone-specific allocation failures. What we see: - Zone-redundant and "zones 1, 2, 3" deployments fail. Errors were GatewayAllocationFailed…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-10-05T09:09:52.59+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 46%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESJ%3C/text%3E%3C/svg%3E)
Shwetha J
15
Reputation points
answered
2026-10-07T01:10:40.9633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 24%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWP%3C/text%3E%3C/svg%3E)
Walker Pollitt
400
Reputation points
1 answer
Unable to open port
Hi I am running into a connection time between the systems, though the NSG inbound rules & outbound rules are in place for the port 3299, where external SAP backbone systems connect to SAP router hosted on Azure. [Thr 88780] Tue Jul 07 05:36:50…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-07-07T03:40:12.99+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 26%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Santosh Kumar
20
Reputation points
commented
2026-10-05T01:32:20.6+00:00
Santosh Kumar
20
Reputation points
1 answer
Azure Firewall Policy: Stuck in Updating State After Large Rule Changes — Troubleshooting and Resolution
Problem description I am facing an issue where my Azure Firewall Policy remains in the 'Updating' state after applying a large rule update. This causes subsequent Terraform deployments to fail with the error…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-09-30T17:18:40.58+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 94%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL2%3C/text%3E%3C/svg%3E)
LuisAbrajan-2096
0
Reputation points
answered
2026-09-30T19:44:14.51+00:00
Allan Solomon Mejia
10,800
Reputation points
0 answers
Azure Firewall Policy update succeeds but returns "Failed with 1 faulted referenced firewalls"
Hi, We're building an integration that creates new rules into an Azure Firewall Policy. On one update we received this error: Put on Firewall Policy <policy name> Failed with 1 faulted referenced firewalls. However, the policy change itself…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-09-30T13:43:52.55+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 52%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERF%3C/text%3E%3C/svg%3E)
Rina Frusman
40
Reputation points
asked
2026-09-30T13:43:52.55+00:00
Rina Frusman
40
Reputation points
2 answers
What happens when Azure Firewall Policy limits are exceeded? Enforcement, performance and failure behavior
Hi, There is a list of Azure firewall limitations The Azure Firewall limits page lists several limits for Azure Firewall and Firewall Policy. For example: Rule limits 20,000 unique source/destinations in network rules.... Total size of rules within…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-09-23T15:35:29.12+00:00
Rina Frusman
40
Reputation points
answered
2026-09-23T21:56:29.44+00:00
Jose Benjamin Solis Nolasco
13,021
Reputation points
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
FortiNet SDWAN connection in azure Hub and spoke
Hi, We have Hub and spoke topology with azure native firewall. Now I want to deploy FortiGate firewall and want to terminate SDWAN tunnels. As of now we will establish SDWAN connection over express route and internet. We will move out azure firewall and…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 43%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
0 answers
Azure Service Tags: Which Service Tag(s) cover which MS Auth URLs/IPs
We are trying to migrate away from using Azure service tags in our Azure firewall, to enable more specific control over the endpoints/URLs that can be accessed. We are trying to identify which service tag(s) cover the following authentication URLs: …
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-08-18T10:34:19.07+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 96%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBR%3C/text%3E%3C/svg%3E)
BATCHELOR Richard
0
Reputation points
commented
2026-08-24T10:48:38.43+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 94%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Tchimwa Sougang
946
Reputation points Microsoft Employee
1 answer
Our team has deployed Azure Standard Firewall in a customer Azure Account but it is not able to give logs for real time IP and the customer is not interested to give full access to system , please suggest how it can be resolved
Our team has deployed Azure Standard Firewall in a customer Azure Account but it is not able to give logs for real time IP and the customer is not interested to give full access to system , please suggest how it can be resolved
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-08-21T20:46:00.82+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 86%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
Kshitij Mathur
0
Reputation points
answered
2026-08-22T01:47:48.62+00:00
Allan Solomon Mejia
10,800
Reputation points
2 answers
Reporting MSN Network Routing Issue
hi We are trying to access Azure resource from an ISP outbound. somehow the route is dying within the MSN network. It works fine for rest of the public IP's. Is there a way to fix it?
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-08-19T15:10:12.12+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 80%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
NK
0
Reputation points
commented
2026-08-19T18:38:24.5066667+00:00
Allan Solomon Mejia
10,800
Reputation points
1 answer
Application Gateway V1 frontend unreachable (connection timeout) — backend healthy, NSGs correct, fresh restart with new IP didn't help
Our Application Gateway (V1 SKU) "EnFMGateway" is completely unreachable from the public internet on ports 80/443, even after a full stop/start (which assigned a new public IP: 20.74.250.181). Backend health shows Healthy, VM is running…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-08-13T10:03:35.8766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 14.000000000000002%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Saeed Anwar
0
Reputation points
answered
2026-08-13T10:03:56.59+00:00
AI answer
2 answers
Azure Firewall Custom UDR
Hello, During the implementation of a routing change in the Azure Landing Zone hub-and-spoke environment, a custom User Defined Route (UDR) table was associated with the AzureFirewallSubnet to route the prefix 10.111.0.0/16 through a specific virtual…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-08-03T14:56:56.5733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 39%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDK%3C/text%3E%3C/svg%3E)
Dimitrios Katsaras
0
Reputation points
answered
2026-08-03T15:31:29.7+00:00
MUCHARLASRINEELACHANDRIKA-20
0
Reputation points
0 answers
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
894 questions
asked
2026-05-25T23:58:21.15+00:00
Ashley Swearingen
0
Reputation points Microsoft External Staff
Moderator
edited the question
2026-07-28T21:52:57.4933333+00:00
Ashley Swearingen
0
Reputation points Microsoft External Staff
Moderator