Network Security

Azure provides services to filter and monitor network traffic. They include firewalls, protection against denial-of-service attacks, and management tools to centralize administration of network security. 

Azure Firewall

Service Overview 

Azure Firewall is a managed service for securing network traffic between endpoints. It comes in three editions, Basic, Standard, and Premium.

Basic, generally available as of Mar. 2023, targets small and medium businesses with network traffic not exceeding 250Mbps. It provides basic networking monitoring and filtering capabilities, high availability, logging, and alerts when known malicious IP addresses or domains are detected.

Standard provides several methods for controlling traffic into and out of networks, including filtering based on network address or protocol type, Network Address Translation (NAT), and threat intelligence to deny access from known malicious sources. It can be deployed in a high-availability configuration using multiple zones and is available in all Azure regions. Capabilities include support for custom DNS, DNS proxy through Firewall, and fully qualified domain name (FQDN) filtering in network rules. Firewall Policy allows Azure Firewall rule collections to be stored as an Azure resource that can be used across multiple Azure Firewall instances.