Implementing Azure Firewall and Azure Bastion

Let's have a look at Azure Firewall and the different SKUs available and what functionality they have.

Azure Firewall

When it comes to networking in Azure, NSGs are considered a basic-level firewall. However, sometimes a solution is required that has more granular control over traffic, or a smarter firewall is required; this is where Azure Firewall shines.

Azure Firewall has three main policies that can be configured:

• A Network Address Translation (NAT) rule: This is used to translate the firewall's public IP address and port to a private IP address and port.
• A network rule: This has the same rules as NSGs but has additional features, such as being able to create rules based on fully qualified domain names (FQDNs) instead of just using IP addresses.
• An application rule: This is used to allow or deny traffic based on specific applications that are based on FQDNs.

The following diagram shows how rules...