Demo: Azure Firewall Configuration

Limiting network access is an important part of the overall network security plan. For example, we have to limit access to websites and sometimes even the outbound IP addresses and ports that can be accessed. A way to control network access from an Azure subnet is with Azure Firewall.

Using Azure Firewall, we can configure network rules that define source address, destination port, and destination address. Let’s walk through a demo where you’ll set up a network environment, and deploy a firewall using both the Azure Portal and CLI commands.

Demo: Azure Firewall setup

For the demo, you first need to create a resource group. In our case, we have demo-exercise-gp as our resource group. Next, you have to set up the network.

Setting up the network using Azure Portal

Here’s how you can create a virtual network:

1. Navigate over to Azure Portal and log in.

2. On the Azure home page, click the Create a Resource button. This will open a marketplace. You can type “virtual network” in the search box or scroll down to find it.

3. Click the “Create virtual network” button. This will open up a form to fill in the details. Select your subscription and an already existing resource group. If you don’t have any, create one and give it any desired name.

4. Next, in the “Instance details” section, fill in the “Name” and the “Region” fields. Once you’re done with this, ...