Azure Firewall · Firewall Australia
Azure Firewall configuration and management
Azure Firewall in Australian businesses
Azure Firewall configuration in Australia for businesses running servers and applications in Microsoft Azure. SyncBricks designs Azure Firewall and Firewall Policy, hub-and-spoke networking, TLS inspection and IDPS on the Premium tier, and logging to Microsoft Sentinel, then manages it as part of our managed IT security service.
A cloud-native managed firewall for Azure networks. Often used on its own for Azure workloads, or alongside on-premises firewalls such as Palo Alto or FortiGate in hybrid environments.
Azure Firewall: strengths and considerations
Strengths
- Native to Azure and deployable with Bicep or Terraform
- Premium tier adds TLS inspection, IDPS and URL filtering
- Azure Firewall Manager supports hub-and-spoke and multi-region policy
- Threat intelligence from Microsoft
- Australian Azure regions support data residency requirements
Considerations
- The Standard tier has fewer inspection features than a dedicated next-generation firewall
- Costs depend on hours deployed and data processed
- Complex policy and routing need experienced cloud engineers
Where it is typically used
- Businesses with servers or applications hosted in Azure
- Hub-and-spoke Azure network designs
- Hybrid environments connecting offices to Azure
- Azure landing zone deployments
What our Azure Firewall configuration covers
- Azure Firewall and Firewall Policy deployment
- Hub-and-spoke network and routing design
- Azure Firewall Manager for multi-region policy
- TLS inspection, IDPS and URL filtering on Premium
- Policy as code with Bicep or Terraform
- Logging to Log Analytics and Microsoft Sentinel
FAQ
Azure Firewall firewall questions
Is Azure Firewall enough, or do we need Palo Alto or FortiGate in Azure?
For many businesses with workloads in Azure, Azure Firewall, often on the Premium tier, is sufficient. Where policy needs to match on-premises firewalls or you need specific inspection features, a Palo Alto or FortiGate virtual appliance in Azure is a common alternative. We recommend based on how you operate, not on vendor preference.
Can you deploy Azure Firewall as infrastructure as code?
Yes. We deploy Azure Firewall and its policy with Bicep or Terraform and keep the configuration in source control, so every change is reviewed, recorded and can be rolled back.
How does Azure Firewall relate to the Essential Eight?
The Essential Eight focuses mainly on endpoint, application and identity controls, so a firewall does not satisfy it on its own. Azure Firewall supports a wider security programme through network segmentation, logging and threat intelligence. We configure it to fit your Essential Eight and broader security goals as part of managed IT security.
What affects the cost of Azure Firewall?
Microsoft charges for each hour the firewall is deployed and for data processed, and the Premium tier costs more than Standard. Configuration effort depends on the number of networks, regions and rules, and whether ongoing management is included. We estimate both after reviewing your Azure environment.
Need help with your Azure Firewall firewall?
Tell us about your setup. We will explain what a review would cover and what we would look at first.