We performed a comparison between Azure Bastion and Azure Firewall based on real PeerSpot user reviews.
Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The connection to virtual machines is very useful."
"The interface is available in the edit portal."
"Azure Bastion makes it easy to provide quick virtual machine access to our customers."
"The product's setup is easy."
"As an Azure consultant, for me, it is the best way to give the administrator access as you can manage the permission - including who can access Bastion."
"The most significant advantage lies in its runbook features, particularly beneficial for our infrastructure team."
"It provides all the security to us. Without getting on the internet, we can access our servers. We can access our desktop through our web browser. We don't need to run the mstsc command and login to the VM. All those things are not required."
"The ability to operate the product with scripting is excellent."
"The solution has many useful features. For example, the solution allows users to create virtual IP addresses."
"One of the notable advantages of Azure Firewall is its user-friendly interface, which closely resembles or shares similarities with other Azure components."
"In terms of the reporting, it's beautiful. It integrates with Azure monitoring and with Azure policies. That piece is a big help. You can set governing policies and you can use the application firewall, as well as the Azure Firewall, to enforce those policies."
"The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats."
"Microsoft's technical support is very good. They're quite knowledgable and responsive."
"The SIEM that Azure Firewall provides us is very robust."
"We secure the entry point to the virtual data center with the firewall."
"The most valuable feature is the integration into the overall cloud platform."
"There are some challenges because Bastion is more compatible with Edge but not with the other browsers. As an organization, it doesn't make sense that we have to use only Edge. We should be able to access Bastion over Chrome, Mozilla, or Opera. It should be our choice."
"While general support is valuable, having a detailed breakdown of the specific issues would contribute to a more streamlined and efficient resolution process."
"When you have a boot issue on Windows, you cannot use Azure Bastion to fix it. You have to use the Azure console or the VM console, and it is very limited."
"The protocol speed could be faster."
"We are not able to copy and paste files directly into the server over the patch host. We have to transfer files over to Azure Storage."
"You are charged for retrieving your own data."
"The solution breaks down sometimes."
"The solution should incorporate features similar to competitors like split tunneling."
"Azure Firewall definitely needs a broader feature base. It should be able to go all the way up to layer 7 when looking at applications and things like that."
"Right now, with Azure Firewall, we cannot have a normal inbound traffic flow. For inbound, Microsoft suggests using application gateways, so the options are very limited. I cannot use this firewall as an intermediate firewall because of the limitations, and I cannot point routing to another firewall. So if I want to use back-to-back firewall architecture in my environment, I cannot use Azure Firewall for that type of configuration either."
"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."
"It has fewer features than you can get from other firewalls, like anti-spam and anti-phishing. Those kinds of things are not included. It only includes IDS and IDB."
"There is room for further integration of AI into the system."
"The tool needs to improve the onboarding and transition process for on-prem users."
"It is a cloud service, but the lending speed for each region is not always the same. For example, in China, the speed is slow. They need to think about how to make sure that the service pace or speed is always the same in all regions. It would be a great improvement if they can provide the same pace worldwide."
Azure Bastion is ranked 17th in Microsoft Security Suite with 8 reviews while Azure Firewall is ranked 14th in Microsoft Security Suite with 33 reviews. Azure Bastion is rated 8.8, while Azure Firewall is rated 7.2. The top reviewer of Azure Bastion writes "Has good scalability and provides secure access to the virtual machines ". On the other hand, the top reviewer of Azure Firewall writes "Easy to use and configure but could be more robust". Azure Bastion is most compared with Azure Front Door, TeamViewer Remote Management, Microsoft Sentinel, Microsoft Entra Verified ID and Microsoft Defender for Cloud Apps, whereas Azure Firewall is most compared with Fortinet FortiGate-VM, Palo Alto Networks NG Firewalls, Microsoft Defender for Cloud, Palo Alto Networks VM-Series and OPNsense. See our Azure Bastion vs. Azure Firewall report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.