Azure Firewall

• Managed, cloud-based network security service that protects your Azure Virtual Network resources.

• You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks.

• Stateful firewall - Analyses the complete context of a network connection, not just an individual packet of network traffic.

• Uses a static public IP address for your virtual network resources, which allows outside firewalls to identify traffic originating from your virtual network.

• Fully integrated with Azure Monitor for logging and analytics.

• Azure Application Gateway also provides a firewall, called the Web Application Firewall (WAF) - provides centralized, inbound protection for your web applications against common exploits and vulnerabilities.