Most Azure networking components used for security are there to stop incoming unwanted traffic. Whether we use network security groups, application security groups, or a web application firewall, they all have one single purpose—to stop unwanted traffic reaching our services. Azure Firewall has similar functionality, including one extension, which we can use to stop outbound traffic from leaving the virtual network.
We will cover the following recipes in this chapter:
- Creating a new Azure Firewall
- Configuring a new allow rule
- Configuring a new deny rule
- Configuring a route table
- Enabling diagnostic logs for Azure Firewall
