Azure Firewall - classic rules - SNAT learned prefixes
I am testing the firewall in the lab, and the following API call always returns an empty object POST…
Azure Firewall
Sample Logs in JSON for Azure Firewall Log Types
Hello Team, We have the Active Subscription Account with MS Azure. We setup Azure Firewall for our Testing and to integrate with QRadar System. We require to have a sample event payload logs (in JSON) for below log types: Threat Intelligence log …
Azure Firewall
Azure Firewall - SNAT learnedIPPrefixes
What happens if an Azure Firewall is configured with 255.255.255.255/32 (to force SNAT on all traffic), while the Auto-learn IP prefixes feature is enabled at the same time? Which configuration takes precedence?** **
Azure Firewall
Our subnet is blocked by all services hosted in azure
Hello, for a while now, we haven't been able to access services hosted on the Azure platform. It's as if we're blocked by the Azure firewall. Some Azure-hosted service providers claim that we're not blocked by them and that this is Azure's fault. Our…
Azure Firewall
Azure Universal Print - QR Release not working
Hey and Sorry could not find the category for Azure Universal Print. I have a bizhub C300i printer setup, direct printing works fine but when setting it up to release via QR Code it does not work. The Universal Print is installed on the printer. When…
Azure Firewall
Azure Firewall - SNAT IP Ranges
Can someone clarify why this is called SNAT private ranges? The documentation uses the word private, and the API returns a property named privateRanges. As far as I understand, it is possible to include public CIDR ranges as well—for example, if I…
Azure Firewall
Azure Firewall Policy API - SNAT ranges
Is there a way to get SNAT range information from the API, especially when a firewall uses a base policy that has a parent policy? When I enable “Use the IP ranges defined in parent policy”, the API response for that policy does not include any…
Azure Firewall
Configure Availability tests for webapps which are behind the Azure Firewall.
I have a hub and spoke architecture deployed in my tenant. In one of the spokes I have a web app deployed. I have quad zero in the route table in the spoke which forwards all the traffic to the Azure firewall in the hub. All the policies and management…
Azure Firewall
DDoS from free online stress test
Hello , if i stress test a virtual network protected by a standard ddos protection plan, the ddos protection does not mitigate any attacks , it does not even recognise them, I used this tool : https://goliathstress.st/ ,it has a power of 15Gbps , and i…
Azure Firewall
P2S Forced Tunnel no internet
I have setup standard VPN Gateway, Firewall and P2S connection which is all working, although P2S client was showing the users' public IPs their end. To fix this I had made is do Forced Tunnelling which sends P2S traffic though the gateway, but there is…
Azure Firewall
Azure Firewall DNAT rules - SNAT
I am looking at this example on the right where the firewall applies SNAT when a DNAT rule is matched. How does it decide whether to change the source IP to its public or private IP address? If the load Balancer was internal then it would change the…
Azure Firewall
Azure Firewall I see the
Azure Firewall reports the following problems: Failed to resolve FQDN microsoftmetrics.com. Error lookup microsoftmetrics.com on 127.0.0.53:53: no such host; DNS resolution returned no IPs. It comes from AzureFirewallSubnet subnet. So seems that Azure…
Azure Firewall
Outbound traffic flow with Azure Firewall & NAT Gateway
I have a spoke VNet that’s peered with a hub VNet. The hub contains an Azure Firewall, and the firewall subnet has a NAT Gateway associated with it. I’m trying to understand the traffic flow when a VM in the spoke initiates a connection to an Internet…
Azure Firewall
How can I add a DNAT rule in Azure Firewall policy for incoming traffic to a specific IP address with a port range?
I'm trying to add a DNAT (Destination Network Address Translation) rule in Azure Firewall policy for incoming traffic to a specific IP address with a port range but encountering an issue where can't add a port range, only single ports. If this is not…
Azure Firewall
Whats the order of Firewall policies execution.
I have a hub and spoke setup in my tenant. There 2 vm, one in each spoke. I have a azure firewall policies setup. All the traffic between the spokes are routed through the firewall. I have a firewall policy in place. 1 network rule which allows with…
Azure Firewall
Why would inbound/outbound HTTPS requests to a payment gateway (secure.clickpay.com.sa) timeout from our Azure VM but work from local devices, despite confirmed NSG and firewall rules allowing the traffic?
We’re experiencing a connection timeout whenever a client tries to complete a payment. When I run: curl -I https://secure.clickpay.com.sa from our server, there is no response—but the same command succeeds from my personal device or others. I’ve already…
Azure Firewall
How can one find Azure Firewall creation date please?
Hi I'm trying to find Azure Firewall creation date please. I failed to find it in resource JSON view or playing with get-resource PS command and looking at properties fields. Thanks
Azure Firewall
What is https://aka.ms/. Why is this firewalled?
Is https://aka.ms safe? I can't access anything from Microsoft anymore because https://aka.ms/ is blocked behind my company firewall. What is https://aka.ms/? Why did Microsoft start putting all MSDN downloads here? VS 2022 is here. Why?
Azure Firewall
Alternatives for IP groups while creating firewall policy rules.
I have a bunch of network and application rules in Azure Firewall Policy. While creating the groups I can either specify source and destination IP ranges or IP groups. I am implementing the Hub and spoke architecture in my tenant which means I will…
Azure Firewall
Azure Firewall - URL matching
Does www.contoso.com in targetUrl match www.contoso.com/?siteId=asd343s32kj343dce ? Documentation mentions that it should match below examples www.contoso.com www.contoso.com/ The doc also mentions that www.contoso.com/test should match…