Back to Tech landscape

Azure Firewall

Cloud & DevOps

Managed network security for Azure VNets

Official documentation (opens in a new tab)

Overview

Azure Firewall provides stateful, cloud-native network security for hub-and-spoke Azure Virtual Networks—application rules, network rules, and threat intelligence-based filtering for outbound and east-west traffic.

ConnectSoft designs landing zones where AKS, App Service (VNet integrated), and data services egress through controlled paths—documented allow lists for package feeds, model APIs, and partner endpoints.

Factory templates assume least-privilege networking in production; Firewall policies are client-infrastructure owned with our guidance for .NET service dependencies.

When compliance requires explicit egress control, Firewall is part of the platform blueprint—not an afterthought when egress fails mysteriously.'

Why we use it:

  • Hub-spoke topology with centralized egress
  • Application rules for required SaaS and package endpoints
  • Threat intelligence filtering where policy allows
  • Logging to Log Analytics for Sentinel correlation
  • Coordinated with private endpoints for PaaS services
  • Documented exceptions per environment
  • Reviewed when adding new external integrations

Ready to work with us?

Let's discuss how our team can help achieve your digital goals