Azure Firewall Valuable Features

Charan Kumar - PeerSpot reviewer
Director, Technology at a computer software company with 5,001-10,000 employees

It's integrated with Azure. You don't have an additional licensing cost and no additional maintenance. The configurations are also comparatively easy.

View full review »
Nawaz Ahmed. - PeerSpot reviewer
Information Technology Project Manager at Thoucentric

Azure Firewall has a lot of features that are comparable to Palo Alto and other firewalls. One of them is security incidents and event management. The SIEM that Azure Firewall provides us is very robust.

There are constant feature additions. They add features every three to six months. They add a lot of new features to it, and its cost is comparatively cheaper than the traditional ones.

View full review »
Rene Schouten. - PeerSpot reviewer
Senior Solution Architect at Stichting Inlichtingenbureau

One of the best features is that it natively integrates with Azure Services and tools. When you have a third-party offering, that is not the case. But Azure Firewall provides a comprehensive and seamless security solution for your Azure resources. The flawless integration is really nice with the Azure AD, Azure Monitor, and Azure Bastion. Everything fits together. If you use Sentinel, it's also good for that.

View full review »
Buyer's Guide
Azure Firewall
April 2024
Learn what your peers think about Azure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,578 professionals have used our research since 2012.
TM
Senior Cloud Architect at Kyndryl

The initial setup is not complex. It's very simple. 

It is an easy product to maintain.

The solution is stable. 

View full review »
Ricardo S. - PeerSpot reviewer
IT Infrastructure Architect at a financial services firm with 10,001+ employees

The firewall policy control, URL content control, and antivirus are all the most valuable aspects. Threat prevention is as well quite good. 

View full review »
MB
Cloud Architect at a tech services company with 10,001+ employees

We're still looking into the features. I can't evaluate much of it right now because we're still exploring. The requirements that we are looking at on the firewalls have been met, and we have begun running the operations. We are also looking forward to the next level of firewall features.

It's auto-scalable, which is a great feature. It also meets industry-level standards and compliance requirements, which have been verified by our security team.

It supports native load balances, and routable can be easily configured, which is another added feature. When we look at any other firewalls, and they were difficult to configure, which came in handy with Azure Firewall.

Layer four security is to be expected. In contrast, with Azure Firewall, you can extend it to the other Wi-Fi layers.

View full review »
JJ
Group Cloud Competency Center Manager at a transportation company with 10,001+ employees

Network filtering is valuable. The scalability capability from the cloud-native service helps us a lot because it simplifies our day-to-day maintenance activity.

View full review »
Prateek Agarwal - PeerSpot reviewer
Manager at Indian Institute of Management Visakhapatnam

I like that this solution is secure and reliable.

View full review »
KI
Manager - Network & Security at a tech services company with 501-1,000 employees

The Layer four features are okay and meet my business needs.

Security is playing a vital role these days, and the layer seven features such as IPS and malware protection are helpful in that regard.

The interface is fair and has not given us any challenges.

View full review »
GT
Network Security Engineer at Diyar United Company

The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats. It can easily detect threats and I have customers that have experienced this.

The malware signatures are updated automatically, which is helpful for new customers.

View full review »
BalamuruganSarangapani - PeerSpot reviewer
Sr. Technical Consultant - Cloud Delivery at a tech services company with 501-1,000 employees

The security of Azure Firewall is okay for smaller and medium-sized organizations. It has been integrated with the virtual WAN, which is a good way to protect multi branches for connection either through ExpressRoute or VPN.

The dashboard is fine because it's simple and easy to use. For junior admins who are joining an organization and want to learn something, Azure Firewall is the best way to go, as it gives them all the flexibility. It's not so customized. Whereas with Palo Alto, for example, you have to understand firewalls, and the security aspects, in a more in-depth way. Azure Firewall is easy.

It is easy for me to protect specific ports or even the IP addresses, as well as do whitelisting, blacklisting, and the FQDN when we want virtual machines connected and to protect certain websites. There are many features which are good enough.

Also, the documentation is awesome, no doubt about it. 

View full review »
TZ
Senior Azure Solution Architect at a tech company with 10,001+ employees

There are a lot of competitors to Azure Firewall. Microsoft figured it out, that they needed a firewall for their Azure platform that can integrate with their services. That's why they came up with Azure Firewall. It really has a pretty nice integration with Azure services. 

In terms of the reporting, it's beautiful. It integrates with Azure monitoring and with Azure policies. That piece is a big help. You can set governing policies and you can use the application firewall, as well as the Azure Firewall, to enforce those policies. If you use the Azure platform, it is the best choice. And they're working on integrating it with many more Azure resources.

The configuration is much easier because Microsoft already provides you with a tool that belongs to Azure. You can set one rule instead of setting 100 rules. That makes the administration of Azure Firewall much easier. For example, when it comes to DNS tags, services tags, and URL tags, you don't have to go URL-by-URL and tell it to open this or that port.

In addition, it's a SaaS service. You don't have to worry about managing a virtual machine and things like patching and upgrading.

View full review »
CC
Head of IT at NetRefer

The solution has many useful features. For example, the solution allows users to create virtual IP addresses. 

View full review »
DL
Technical Architect at a tech services company with 10,001+ employees

The solution provides a good link to Azure and SQL servers.

View full review »
it_user1297926 - PeerSpot reviewer
Owner at a financial services firm with 1,001-5,000 employees

The most valuable features of the product are its great security and connectivity. 

View full review »
RH
Senior Security Operations and Cyber Risk Analyst at a financial services firm with 51-200 employees

With the recent upgrade to the premium version, it facilitates IP Groups, URL filtering, TLS inspection, IDPs, and the Web Categories.

Before using the premium version, a lot of our customers had concerns with the URL filter, where you would not be able to allow or block a specific URL. The feature set without a premium version would only allow you to do it via IP address, which is tedious.

At times, many of these vendors would be using some kind of CDN solution. It would be the case where multiple IPs appear, changing behind the URL when it would be easier if you're using the URL feature. The URL maps onto the IP address and it would be the easiest way to do that.

I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.

Many other vendors, when you do not have the license for the IP at some point, then you would be left not being able to do any prevention. The fact that the premium version includes this is good.

The TLS inspection allows you to decrypt the outbound traffic and encrypt data. Otherwise, we would have been using our third-party vendors, and whatever solution is within Azure.

With the various business units, we will be reaching out to other solutions there are in the web category to reduce the attack surface to see if this is a category that is alone or not.

The fact that Azure also ties into a security center is another good feature. You can also get rid of that visibility because of the tight integration with these Azure products.

View full review »
JA
Freelance Consultant at The Future Group

The HTTPS Inspection feature was useful where HTTPS traffic is scanned before it goes over the line.

Its interface is okay, and it is very adjustable. I like IP groups and other things that you can do with it.

View full review »
DJ
Cloud Architect at a financial services firm with 1,001-5,000 employees

I can easily configure it.

View full review »
MA
Cyber Security architect at Avanade

All its features are good. That's why we recommend it.

View full review »
CF
Cloud Architect at a computer software company with 1,001-5,000 employees

Azure Firewall is a cloud-native solution that removes the pain of load balancers. 

View full review »
RK
Senior Security Analyst at a tech vendor with 1,001-5,000 employees

Among the most valuable features are the

  • DDoS protection which protects your virtual machines
  • threat intelligence 
  • traffic filtering.
View full review »
DL
Network Engineer at a leisure / travel company with 10,001+ employees

Azure Firewall's feature that I have found most valuable is its scalability.

View full review »
SV
Cloud Architect at a pharma/biotech company with 10,001+ employees

The ability to provide better control of the traffic is the solution's most valuable aspect.

The solution is stable.

The solution can autoscale.

The initial setup is pretty easy.

Technical support has been good to us so far.

View full review »
VT
IT Senior Architect, Infrastructure and Cloud Solutions at a government with 501-1,000 employees

Scalability, multi-zone and FQDN TAgs.

View full review »
VJ
CEO at Foresight Cyber Ltd

The most valuable feature is the integration into the overall cloud platform. The orchestration is very easy using automation with APIs and scripts.

View full review »
MA
Senior System Engineer at Effvision

High availability is built in, so no additional load balancers are required and there's nothing you need to configure 

Azure Firewall can be configured during deployment to span multiple Availability Zones for increased availability

You can limit outbound HTTP/S traffic or Azure SQL traffic (preview) to a specified list of fully qualified domain names (FQDN) including wild cards. This feature doesn't require TLS termination.

You can centrally create allow or deny network filtering rules by source and destination IP address, port, and protocol. Azure Firewall is fully stateful, so it can distinguish legitimate packets for different types of connections

Threat intelligence  -based filtering can be enabled for your firewall to alert and deny traffic from/to known malicious IP addresses and domains

Inbound Internet network traffic to your firewall public IP address is translated (Destination Network Address Translation) and filtered to the private IP addresses on your virtual networks.

View full review »
SP
Cloud Architect at a manufacturing company with 1,001-5,000 employees

I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference.

View full review »
AL
Consultant at a manufacturing company with 1,001-5,000 employees

Performance and stability are the key features of this product, but the reasonable cost is also an important positive factor. 

View full review »
Buyer's Guide
Azure Firewall
April 2024
Learn what your peers think about Azure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,578 professionals have used our research since 2012.