Azure Firewall Manager is a centralized management platform for network security policies in Azure. The service enables unified configuration of Azure Firewall across multiple hubs, VNETs, and subscriptions.
What is Azure Firewall Manager?
Azure Firewall Manager provides a central interface for managing firewall policies and security configurations. Instead of configuring each Azure Firewall individually, administrators can define policies centrally and apply them to multiple firewalls.
The service supports two architectures: Hub Virtual Networks (classic hub-and-spoke topology) and Secured Virtual Hubs (with Azure Virtual WAN). Both options enable centralized traffic routing through Azure Firewall.
Core Features
- Central Policy Management: Create and manage firewall policies for multiple firewalls
- Hierarchical Policies: Base policies at enterprise level with inheritance for teams
- Secured Virtual Hubs: Integration with Azure Virtual WAN for global routing
- Security Partner Integration: Zscaler, Check Point, iboss as SECaaS providers
- Threat Intelligence: Integration with Microsoft Threat Intelligence feeds
Typical Use Cases
Firewall Manager is suited for enterprises with multiple Azure subscriptions and regions that need unified security policies. The service is ideal for hub-and-spoke architectures and Azure Virtual WAN deployments.
Benefits
- Unified security policies across all Azure Firewalls
- Reduced administration overhead through centralized management
- Compliance through hierarchical policy inheritance
- Integration with Azure Virtual WAN for global networks
Integration with innFactory
As a Microsoft Solutions Partner, innFactory supports you with Azure Firewall Manager: network security design, hub-and-spoke architectures, Virtual WAN setup, and security governance.
Typical Use Cases
Frequently Asked Questions
What is the difference between Azure Firewall Manager and Azure Firewall?
Azure Firewall is the actual firewall service that filters traffic. Firewall Manager is the centralized management console for firewall policies across multiple firewalls and subscriptions.
Does Azure Firewall Manager cost separately?
No, Azure Firewall Manager itself is free. You only pay for the Azure Firewall instances and the traffic flowing through them.
Can I integrate third-party security providers?
Yes, Firewall Manager supports security partners like Zscaler, Check Point, and iboss as security-as-a-service providers for internet traffic.
What are Secured Virtual Hubs?
Secured Virtual Hubs are Azure Virtual WAN hubs with integrated Azure Firewall or security partner. They enable centralized security routing for all connected VNETs and branches.
