Azure Firewall Valuable Features
Senior Security Operations and Cyber Risk Analyst at a financial services firm with 51-200 employees
With the recent upgrade to the premium version, it facilitates IP Groups, URL filtering, TLS inspection, IDPs, and the Web Categories.
Before using the premium version, a lot of our customers had concerns with the URL filter, where you would not be able to allow or block a specific URL. The feature set without a premium version would only allow you to do it via IP address, which is tedious.
At times, many of these vendors would be using some kind of CDN solution. It would be the case where multiple IPs appear, changing behind the URL when it would be easier if you're using the URL feature. The URL maps onto the IP address and it would be the easiest way to do that.
I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.
Many other vendors, when you do not have the license for the IP at some point, then you would be left not being able to do any prevention. The fact that the premium version includes this is good.
The TLS inspection allows you to decrypt the outbound traffic and encrypt data. Otherwise, we would have been using our third-party vendors, and whatever solution is within Azure.
With the various business units, we will be reaching out to other solutions there are in the web category to reduce the attack surface to see if this is a category that is alone or not.
The fact that Azure also ties into a security center is another good feature. You can also get rid of that visibility because of the tight integration with these Azure products.View full review »
Group Cloud Competency Center Manager at a transportation company with 10,001+ employees
Network filtering is valuable. The scalability capability from the cloud-native service helps us a lot because it simplifies our day-to-day maintenance activity.
The most valuable feature is the integration into the overall cloud platform. The orchestration is very easy using automation with APIs and scripts.
There are a lot of competitors to Azure Firewall. Microsoft figured it out, that they needed a firewall for their Azure platform that can integrate with their services. That's why they came up with Azure Firewall. It really has a pretty nice integration with Azure services.
In terms of the reporting, it's beautiful. It integrates with Azure monitoring and with Azure policies. That piece is a big help. You can set governing policies and you can use the application firewall, as well as the Azure Firewall, to enforce those policies. If you use the Azure platform, it is the best choice. And they're working on integrating it with many more Azure resources.
The configuration is much easier because Microsoft already provides you with a tool that belongs to Azure. You can set one rule instead of setting 100 rules. That makes the administration of Azure Firewall much easier. For example, when it comes to DNS tags, services tags, and URL tags, you don't have to go URL-by-URL and tell it to open this or that port.
In addition, it's a SaaS service. You don't have to worry about managing a virtual machine and things like patching and upgrading.View full review »
Owner at a financial services firm with 1,001-5,000 employees
The most valuable features of the product are its great security and connectivity.
The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats. It can easily detect threats and I have customers that have experienced this.
The malware signatures are updated automatically, which is helpful for new customers.View full review »
Network Engineer at a leisure / travel company with 10,001+ employees
Azure Firewall's feature that I have found most valuable is its scalability.View full review »
The solution has many useful features. For example, the solution allows users to create virtual IP addresses.View full review »
Cloud Architect at a pharma/biotech company with 10,001+ employees
The ability to provide better control of the traffic is the solution's most valuable aspect.
The solution is stable.
The solution can autoscale.
The initial setup is pretty easy.
Technical support has been good to us so far.View full review »
Technical Architect at a tech services company with 10,001+ employees
The solution provides a good link to Azure and SQL servers.View full review »
Manager - Network & Security at a tech services company with 501-1,000 employees
The Layer four features are okay and meet my business needs.
Security is playing a vital role these days, and the layer seven features such as IPS and malware protection are helpful in that regard.
The interface is fair and has not given us any challenges.View full review »
Among the most valuable features are the
- DDoS protection which protects your virtual machines
- threat intelligence
- traffic filtering.
High availability is built in, so no additional load balancers are required and there's nothing you need to configure
Azure Firewall can be configured during deployment to span multiple Availability Zones for increased availability
You can limit outbound HTTP/S traffic or Azure SQL traffic (preview) to a specified list of fully qualified domain names (FQDN) including wild cards. This feature doesn't require TLS termination.
You can centrally create allow or deny network filtering rules by source and destination IP address, port, and protocol. Azure Firewall is fully stateful, so it can distinguish legitimate packets for different types of connections
Threat intelligence -based filtering can be enabled for your firewall to alert and deny traffic from/to known malicious IP addresses and domains
Inbound Internet network traffic to your firewall public IP address is translated (Destination Network Address Translation) and filtered to the private IP addresses on your virtual networks.View full review »
Cloud Architect at a financial services firm with 1,001-5,000 employees
I can easily configure it.View full review »
Scalability, multi-zone and FQDN TAgs.View full review »
I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference.View full review »
Consultant at a manufacturing company with 1,001-5,000 employees
Performance and stability are the key features of this product, but the reasonable cost is also an important positive factor.