On-premises expressroute BGP is advertising 0.0.0.0/0 and using Azure Firewall to control traffic (including internet)
hi My environment is an on-premises expressroute BGP is advertising 0.0.0.0/0. I want to use Azure Firewall to control all traffic (including internet). See and discuss the architecture picture attached below. My guess is that we need to send the route…
Azure Hub Network with NVA and azure firewall and routing between VPN and Express route gateway through firewalls
Hi Team, I have attached the network diagram, Here is set up. There is HUB and Spoke topology with NVA. All traffic between on-premise and azure spoke is passing through NVA Third party location is connected through SDWAN VM over internet. SDWAN VM is…
Hub and two Spoke vnets with AFW in Hub and traffic from Expressroute
Hello, I have got problem with not going traffic via Azure Firewall from ExpressRoute to one of two spoke vnets(I don't see any traffic on Firewall logs but I can see traffic with tcpdump on VM in spoke). Traffic to on-prem via ExpressRoute works fine…
going with the application gateway in fornt of azure firewall does it lose the benefit of l7 load balancing
I have an Azure firewall in a hub and spoke architecture, and one of the spokes contains my web servers, for HTTPS filtering I have an application gateway with the WAF feature and l7 load balancing. I have a requirement to keep centralized security…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
VNETs in different subscriptions not communicating with Azure Firewall
Having a head scratcher. Layout: Subscription 1: Includes: VNET A, VPN Gateway to Data Center, Firewall with Policy. Subscription 2: Includes: VNET B, computer Resources Spinning up a VM in VNET A I can communicate out and to the Data Center through the…
Azure Firewall has started NATing random traffic flows between VMs
Our monitoring system found a web site not responding last Saturday morning (24th August). Logs showed that it could no longer talk to its database. The web site is running on a VM -- VM1. The SQL Server is on VM2. They are on different subnets of the…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
ICMP Timestamp Request Remote Date Disclosure Details - The remote host answers to an ICMP timestamp request.
how to resolve this or do we have any information if we can restrict on firewall
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Azure firewall - Firewall policy under "Policy" section is not showing any "Parent policy".
As a test, we have deployed Azure Firewall in a region. When I access the firewall, it has 2 Firewall policy (1- Policy and 2- Base Policy). My understanding is that Base Policy is considered as a Parent policy and just Policy is considered as a child…
Using Azure Private Resolver with Firewall DNS proxy
Hi, I am currently looking at implementing Azure DNS private resolver (inbound and outbound endpoint subnets) within a hub-and-spoke network with the ultimate goal of resolving DNS to/from an on premise site located down a VPN connection and the spokes…
What are differences between Firewall DNS Proxy and DNS Private Resolver?
I am unsure which to choose Azure Firewall DNS Proxy and DNS Private Resolver as a DNS forwarder. I'd like to know the main differences and practical situations for each.
PORT 22 BLOCKED
Hello, since 6-9-24 i cant connect an sftp site from my windows azure windows 2016 server anymore. it is using port 22 and it always worked fine using filezilla. i disabled the firewall on the windows vm but that didnt help. what to do?
Problem with connecting Azure Files from container when using Azure Firewall
Hello, I have a problem with Azure container and a firewall. This container needs to access Internet, Azure Files (SMB) and Azure SQL database. If I start the container without any firewall configuration, it works without problems (except I cannot access…
Deployment of Firewall ends with Provisioning state 'Failed'
I am having a hub/spoke network architecture. Whenever I tried provisioning Azure Firewall, it will go into a Failed state. And it seems like the only way to resolve this is to add a route table to it and configure a 0.0.0.0/0 route to the Internet. My…
how do i find in azure firewall who has deleted a specific firewall rule
Please help - how do i find in azure firewall who has deleted a specific firewall rule Thank you
When to use Azure WAF or Azure Firewall ?
Hi Folks, Can anyone here please share some thoughts and comments of when to use Azure WAF or Azure Firewall? I have already existing Azure ExpressRoute so my Azure VMs can ping my OnPremise servers, and vice versa. My purpose here is to be able to…
![](https://techprofile.blob.core.windows.net/images/WsWYoGdWukeBW66msAr6qQ.png?8D8128)
Azure Firewall Policy Analytics
hello, Why on firewall policy analytics we cannot see any denied action? Is the default deny policy on azure firewall is not captured?
![](https://techprofile.blob.core.windows.net/images/zCxR1gzTUkeGX5-wM6PGoA.png?8DB52A)
Changes coming to the Azure Update Delivery service tag
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/changes-coming-to-the-azure-update-delivery-service-tag/ba-p/4156552 We recommend switching from using service tags (like AzureUpdateDelivery and AzureFrontDoor.FirstParty) to application…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Azure Firewall and Inbound Filtering documentation
Hi! I have a question about the Azure Firewall documentation and the Knowledge Check section. The documentation (although it does not explicitly say otherwise) focuses on the fact that the Azure Firewall service is not suitable for filtering inbound…
Internet Access Issue on macOS with Azure Virtual WAN Point-to-Site VPN whilst working for Windows
We are experiencing an issue with internet connectivity when using the Azure VPN client on macOS to connect to a Virtual WAN Point-to-Site (P2S) VPN gateway. Issue Details: Environment: Virtual WAN with Point-to-Site VPN gateway configured for forced…
Subnet association to firewall
All of my Azure VM use one subnet, and if this subnet associated to the azure firewall can i exclude some VMs to not use the firewall?
![](https://techprofile.blob.core.windows.net/images/zCxR1gzTUkeGX5-wM6PGoA.png?8DB52A)
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)