If you were talking to someone whose organization is considering Azure Firewall, what would you say?
How would you rate it and why? Any other tips or advice?
My advice to anybody who is considering this solution is to be clear about your requirements. It is critical to know what the capabilities of the firewall are, as well as what is nice to have when it comes to filtering and protecting the environment. There are different threat profiles when it comes to protecting user traffic. For example, in a VDI environment, where the users are in the cloud, generating traffic and browsing the internet on virtual machines, Azure might not be the best fit. On the other hand, to protect the workloads on servers like application servers or database servers, it's a perfect fit. So, it is important to be clear about the use cases in order to determine whether it is suitable. This is a relatively new product but Microsoft is really fast in their development and you never know what they are planning. In perhaps six months, I might rate it a ten out of ten. Nonetheless, at this time there is still some room for improvement. I would rate this solution a nine out of ten.
I would rate it a six out of ten. It's good enough but it's not as good as other virtual appliances. It's good enough.
The network firewall is a complex project, you have to review all the requirements. It's possible that sometimes the Azure Firewall won't be able to support some things because they customize their applications and they may not meet with the Azure Firewall's features. Each user has unique requirements on shaping or manipulating network traffic. I wouldn't recommend any product without doing the research. I would rate this product an eight out of 10.
We're Azure partners and have an enterprise agreement with the company, however, we may be switching. We also have a dedicated Account Manager with the company. I'd rate the solution seven out of ten. It's missing a few capabilities our organization would really like to see.
I would highly recommend this product. I would rate this product an eight out of 10.
We've used both the on-premises as well as the cloud deployment models. We also occasionally use a hybrid model. During migrations, we use hybrids. Once the migration is done, we move onto the full cloud and pass if over to private cloud or have public access as necessary. The Azure firewall is prioritized as it is managed solution and does not require any infrastructure base (backbone) hardware support.
This is a solution that I recommend for internet-facing network traffic. When it comes to rating this solution, there are two components here. For layer four traffic, I would rate it an eight out of ten. For layer seven traffic, however, I would rate it less. Overall, I would rate this solution a seven out of ten.