Firewall security to help protect your digital assets

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. The stateful firewall service has built-in high availability and unrestricted cloud scalability to help you create, enforce, and log application and network connectivity policies across subscriptions and virtual networks.

• **Threat intelligence–based filtering: **Enable real-time alerts and deny traffic from/to known malicious IP addresses and domains.
• **Deploy and scale in minutes: **Simplify deployment and management of your network security with a scalable and highly available cloud native firewall.
• **Full visibility and protection: **Transport Layer Security (TLS) inspection prevents malware from being transmitted through encrypted connections.
• **Unified management: **Centrally manage security across all virtual networks with a common set of network and application rules.

Features

• **Strengthen your network security posture: **Get advanced threat protection that meets the needs of highly sensitive and regulated environments. Azure Firewall taps into real-time security signals from a wide range of sources using Microsoft threat intelligence to guard against evolving threats and zero-day vulnerabilities.
• **Deploy a stateful firewall in minutes: **Enable turnkey firewall security capabilities in Azure Virtual Network to control and log access to apps and resources. Azure Firewall supports filtering for both inbound and outbound traffic, internal spoke-to-spoke connections, and hybrid connections through Azure VPN and ExpressRoute gateways.
• **Prevent malware and viruses from spreading: **Azure Firewall decrypts outbound traffic, performs required security checks, and then encrypts the traffic to the destination. It works in conjunction with URL filtering and web categories by letting administrators allow or deny user access to website categories such as gambling or social media.
• **Inspect traffic in real time: **The intrusion detection and prevention system (IDPS) capability uses signatures to continuously monitor activities, generate alerts, log information, and optionally attempt to block the attack. It can detect attacks in all ports and protocols for non-encrypted traffic. Encrypted traffic utilizes the TLS inspection capability for decryption.