Azure Firewall Premium

What Azure Firewall Premium is

Azure Firewall Premium is the premium tier of a managed, cloud-based network security service for Azure Virtual Network resources. It enforces and logs application and network connectivity policies, filtering inbound and outbound traffic, internal spoke-to-spoke connections, and hybrid connections through Azure VPN and ExpressRoute gateways. Premium decrypts outbound and east-west TLS traffic for inspection, then re-encrypts it. Its signature-based intrusion detection and prevention includes over 67,000 rules across more than 50 categories, with up to 10,000 rules customizable by users. With TLS inspection enabled, URL filtering can evaluate full HTTP and HTTPS paths; website category rules can also match full URLs. Azure Monitor integration is available, and logs can go to Log Analytics, Azure Storage, or Event Hubs. Management options include Azure Firewall Manager, while DevOps integration supports REST, PowerShell, CLI, templates, and Terraform. Microsoft states the service is PCI, SOC, and ISO compliant and describes Premium as suitable for sensitive, regulated settings such as payment and healthcare. Setup is available through the Azure portal, PowerShell, REST API, or templates. It supports up to 100 Gbps and is available through API and web. There is no free plan. Billing includes a fixed hourly fee per deployment and a separate data-processing fee; partial hours count as full hours. The listed rates display as “$-”.