azure-firewall
Installation
SKILL.md
Azure Firewall
Azure Firewall is a managed, highly available, cloud-native stateful network firewall used to centrally govern and log traffic, typically deployed in the hub of a hub-spoke network. It is the choke point that enforces a default-deny egress posture across an Azure estate.
When to use
Centralising egress (and east-west / ingress) traffic control and inspection across an Azure network estate. Use this skill to pick the SKU, design rules, and deploy in the hub.
Do not use this skill for L7 web app protection (WAF on Front Door / App Gateway), subnet
microsegmentation (NSGs - see azure-network-security-design), or third-party NVA design.