The preferred method is to use Firewall Policy.

This article uses classic Firewall rules to manage the firewall. This subnet's network traffic goes through the firewall. Workload-SN - the workload server is in this subnet.AzureFirewallSubnet - the firewall is in this subnet.The workload servers are in peered VNets in the same region with one or more subnets. Network traffic is subjected to the configured firewall rules when you route your network traffic to the firewall as the subnet default gateway.įor this article, you create a simplified single VNet with two subnets for easy deployment.įor production deployments, a hub and spoke model is recommended, where the firewall is in its own VNet. Network rules that define source address, protocol, destination port, and destination address.Application rules that define fully qualified domain names (FQDNs) that can be accessed from a subnet.One way you can control outbound network access from an Azure subnet is with Azure Firewall. Or, you may want to limit the outbound IP addresses and ports that can be accessed. For example, you may want to limit access to web sites. Controlling outbound network access is an important part of an overall network security plan.

Azure firewall