Azure Firewall Premium in the Azure portal

  • Article

Azure Firewall Premium is a next generation firewall with capabilities that are required for highly sensitive and regulated environments. It includes the following features:

  • TLS inspection - decrypts outbound traffic, processes the data, then encrypts the data and sends it to the destination.
  • IDPS - A network intrusion detection and prevention system (IDPS) allows you to monitor network activities for malicious activity, log information about this activity, report it, and optionally attempt to block it.
  • URL filtering - extends Azure Firewall's FQDN filtering capability to consider an entire URL. For example, www.contoso.com/a/c instead of www.contoso.com.
  • Web categories - administrators can allow or deny user access to website categories such as gambling websites, social media websites, and others.

For more information, see Azure Firewall Premium features.

Deploy the firewall

Deploying an Azure Firewall Premium is similar to deploying a standard Azure Firewall:

portal deployment

For Firewall tier, you select Premium and for Firewall policy, you select an existing Premium policy or create a new one.

Configure the Premium policy

Configuring a Premium firewall policy is similar to configuring a Standard firewall policy. With a Premium policy, you can configure the Premium features:

Premium policy deployment

Rule configuration

When you configure application rules in a Premium policy, you can configure addition Premium features:

Premium rule

Next steps

To see the Azure Firewall Premium features in action, see Deploy and configure Azure Firewall Premium.