Share via

Azure Firewall Session table

Siddhesh Rane 61 Reputation points
2024-06-13T12:28:20.3366667+00:00

Hi Team,

If we manage azure firewall policies through azure firewall manager then Is it possible to see traffic/connections/ session table of Azure firewall from firewall manager or from firewall itself ( Like how we can see traffic in Palo Alto or FortiGate firewalls) ?

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
703 questions
Azure Firewall Manager
Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
97 questions
0 comments
Accepted answer
  1. ChaitanyaNaykodi-MSFT 26,936 Reputation points Microsoft Employee
    2024-06-15T04:00:47.3966667+00:00

    @Siddhesh Rane

    Thank you for reaching out.

    I understand you have question about Azure Firewall logs for existing and past connections.

    I think Structured Firewall Logs for Azure Firewall can help in this case, where you can explore Flow trace logs these firewall logs show traffic through the firewall in the first attempt of a TCP connection, known as the SYN packet.

    Additional References:

    https://techcommunity.microsoft.com/t5/azure-network-security-blog/exploring-the-new-resource-specific-structured-logging-in-azure/ba-p/3620530

    Please let me know if you have any additional questions. Thank you!

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Gowtham CP 5,760 Reputation points
    2024-06-13T13:58:55.6166667+00:00

    Hey Siddhesh Rane ,

    Thank you for reaching out on the Microsoft Q&A .

    While Azure Firewall Manager doesn't have a built-in session table like traditional firewalls, you still have options to monitor traffic. Azure Firewall integrates with Azure Monitor logs, allowing you to send logs to a central workspace for analysis of traffic flows, connections, and firewall actions.

    Check out this documentation for details: https://zcusa.951200.xyz/en-us/azure/firewall/firewall-diagnostics.

    I hope this helps! If you have any further questions, feel free to ask.

    If the information is useful, please accept the answer and upvote it to assist other community members.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.