Skip to content

Commit 01cbff8

Browse files
Merge pull request #268255 from vhorne/fwm-policy
freshness review
2 parents ee46db2 + a4095bb commit 01cbff8

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/firewall-manager/policy-overview.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
title: Azure Firewall Manager policy overview
3-
description: Learn about Azure Firewall Manager policies
3+
description: Learn about Azure Firewall Manager policies.
44
author: vhorne
55
ms.service: firewall-manager
66
services: firewall-manager
77
ms.topic: conceptual
8-
ms.date: 02/10/2023
8+
ms.date: 03/06/2024
99
ms.author: victorh
1010
---
1111

@@ -53,7 +53,7 @@ Azure Firewall supports Basic, Standard, and Premium policies. The following tab
5353

5454
New policies can be created from scratch or inherited from existing policies. Inheritance allows DevOps to create local firewall policies on top of organization mandated base policy.
5555

56-
Policies created with non-empty parent policies inherit all rule collections from the parent policy. The parent policy and the child policy must be in the same region. A firewall policy can be associated with firewalls across regions regardless where they are stored.
56+
Policies created with non-empty parent policies inherit all rule collections from the parent policy. The parent policy and the child policy must be in the same region. A firewall policy can be associated with firewalls across regions regardless where they're stored.
5757

5858
Network rule collections inherited from a parent policy are always prioritized over network rule collections defined as part of a new policy. The same logic also applies to application rule collections. However, network rule collections are always processed before application rule collections regardless of inheritance.
5959

@@ -68,7 +68,7 @@ With inheritance, any changes to the parent policy are automatically applied dow
6868
## Built-in high availability
6969

7070
High availability is built in, so there's nothing you need to configure.
71-
You can create an Azure Firewall Policy object in any region and link it globally to multiple Azure Firewall instances under the same Azure AD tenant. If the region where you create the Policy goes down and has a paired region, the ARM object metadata automatically fails over to the secondary region. During the failover, or if the single-region with no pair remains in a failed state, you cannot modify the Azure Firewall Policy object. However, the Azure Firewall instances linked to the Firewall Policy continue to operate. For more information, see [Cross-region replication in Azure: Business continuity and disaster recovery](../reliability/cross-region-replication-azure.md#azure-paired-regions).
71+
You can create an Azure Firewall Policy object in any region and link it globally to multiple Azure Firewall instances under the same Azure AD tenant. If the region where you create the Policy goes down and has a paired region, the ARM(Azure Resource Manager) object metadata automatically fails over to the secondary region. During the failover, or if the single-region with no pair remains in a failed state, you can't modify the Azure Firewall Policy object. However, the Azure Firewall instances linked to the Firewall Policy continue to operate. For more information, see [Cross-region replication in Azure: Business continuity and disaster recovery](../reliability/cross-region-replication-azure.md#azure-paired-regions).
7272

7373
## Pricing
7474

0 commit comments

Comments
 (0)