Merge pull request #110236 from vhorne/fw-qs

add ip group qs

Author: ttorble

articles/firewall/media/quick-create-ipgroup-template/deploy-to-azure.png

@@ -0,0 +1,91 @@
+---
+title: 'Quickstart: Create an Azure Firewall and IP Groups - Resource Manager template'
+description: Learn how to use a Resource Manager template to create an Azure Firewall and IP Groups.
+services: firewall
+author: vhorne
+ms.service: firewall
+ms.topic: quickstart
+ms.date: 04/06/2020
+ms.author: victorh
+---
+
+# Quickstart: Create an Azure Firewall and IP Groups - Resource Manager template
+
+In this quickstart, you use a Resource Manager template to deploy an Azure Firewall with sample IP Groups used in a network rule and application rule.
+
+An IP Group is a top-level resource that allows you to define and group IP addresses, ranges, and subnets into a single object. This is useful for managing IP addresses in Azure Firewall rules. You can either manually enter IP addresses or import them from a file.
+
+[!INCLUDE [About Azure Resource Manager](../../includes/resource-manager-quickstart-introduction.md)]
+
+## Prerequisites
+
+- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
+
+## Create an Azure Firewall and IP Groups
+
+This template creates an Azure Firewall and IP Groups, along with the necessary resources to support the Azure Firewall.
+
+### Review the template
+
+The template used in this quickstart is from [Azure Quickstart templates](https://github.com/Azure/azure-quickstart-templates/blob/master/101-azurefirewall-create-with-ipgroups-and-linux-jumpbox/azuredeploy.json)
+
+:::code language="json" source="~/quickstart-templates/101-azurefirewall-create-with-ipgroups-and-linux-jumpbox/azuredeploy.json" range="001-512" highlight="118-141":::
+
+Multiple Azure resources are defined in the template:
+
+- [**Microsoft.Network/ipGroups**](/azure/templates/microsoft.network/ipGroups)
+- [**Microsoft.Network/publicIPAddresses**](/azure/templates/microsoft.network/publicipaddresses)
+- [**Microsoft.Network/networkSecurityGroups**](/azure/templates/microsoft.network/networksecuritygroups)
+- [**Microsoft.Network/virtualNetworks**](/azure/templates/microsoft.network/virtualnetworks)
+- [**Microsoft.Compute/virtualMachines**](/azure/templates/microsoft.compute/virtualmachines)
+- [**Microsoft.Network/networkInterfaces**](/azure/templates/microsoft.network/networkinterfaces)
+- [**Microsoft.Storage/storageAccounts**](/azure/templates/microsoft.storage/storageAccounts)
+- [**Microsoft.Network/azureFirewalls**](/azure/templates/microsoft.network/azureFirewalls)
+- [**Microsoft.Network/routeTables**](/azure/templates/microsoft.network/routeTables)
+
+
+### Deploy the template
+
+Deploy Resource Manager template to Azure:
+
+1. Select **Deploy to Azure** to sign in to Azure and open the template. The template creates an Azure Firewall, the network infrastructure, and two virtual machines.
+
+   <a href="https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2Fazure-quickstart-templates%2Fmaster%2F101-azurefirewall-create-with-ipgroups-and-linux-jumpbox%2Fazuredeploy.json"><img src="./media/quick-create-ipgroup-template/deploy-to-azure.png" alt="deploy to azure"/></a>
+
+2. In the portal, on the **Create an Azure Firewall with IpGroups** page, type or select the following values:
+   - Subscription: Select from existing subscriptions 
+   - Resource group:  Select from existing resource groups or select **Create new**, and select **OK**.
+   - Location: Select a location
+   - Virtual Network Name: Type a name for the new virtual network (VNet) 
+   - IP Group Name 1: Type name for IP Group 1 
+   - IP Group Name 2: Type name for IP Group 2 
+   - Admin Username: Type username for the administrator user account 
+   - Authentication: Select sshPublicKey or password 
+   - Admin Password: Type an administrator password or key
+
+3. Select **I agree to the terms and conditions stated above** and then select **Purchase**. The deployment can take 10 minutes or longer to complete.
+
+## Review deployed resources
+
+In the Azure portal, review the deployed resources, especially the firewall rules that use IP Groups.
+
+:::image type="content" source="media/quick-create-ipgroup-template/ipgroups.png" alt-text="IP Groups.":::
+
+:::image type="content" source="media/quick-create-ipgroup-template/network-rule.png" alt-text="Network rules.":::
+
+To learn about the JSON syntax and properties for a firewall in a template, see [Microsoft.Network azureFirewalls template reference](https://docs.microsoft.com/azure/templates/Microsoft.Network/2019-11-01/azureFirewalls).
+
+## Clean up resources
+
+When you no longer need the resources that you created with the firewall, delete the resource group. This removes the firewall and all the related resources.
+
+To delete the resource group, call the `Remove-AzResourceGroup` cmdlet:
+
+```azurepowershell-interactive
+Remove-AzResourceGroup -Name "<your resource group name>"
+```
+
+## Next steps
+
+> [!div class="nextstepaction"]
+> [Tutorial: Deploy and configure Azure Firewall in a hybrid network using the Azure portal](tutorial-hybrid-portal.md)

articles/firewall/media/quick-create-ipgroup-template/ipgroups.png

@@ -5,7 +5,6 @@
   - name: What is Azure Firewall?
     href: overview.md
 - name: Tutorials
-  expanded: true
   items:
   - name: Deploy and configure
     href: tutorial-firewall-deploy-portal.md
@@ -15,6 +14,12 @@
     href: tutorial-firewall-dnat.md
   - name: Monitor diagnostic logs
     href: tutorial-diagnostics.md
+- name: Quickstarts
+  expanded: true
+  items:
+  - name: Deploy with IP Groups
+    displayName: Resource Manager
+    href: quick-create-ipgroup-template.md
 - name: Samples
   items:
   - name: Azure PowerShell