Skip to content

Commit a11053c

Browse files
Merge pull request #216199 from vhorne/fw-limits
change # rule collection groups to 60
2 parents 069dee2 + e04b37b commit a11053c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

includes/firewall-limits.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
author: vhorne
66
ms.service: firewall
77
ms.topic: include
8-
ms.date: 08/19/2022
8+
ms.date: 10/27/2022
99
ms.author: victorh
1010
ms.custom: include file
1111
---
@@ -15,7 +15,7 @@
1515
| Data throughput |30 Gbps|
1616
|Rule limits|10,000 unique source/destinations in network rules <br><br> **Unique source/destinations in network** = sum of (unique source addresses * unique destination addresses for each rule)|
1717
|Total size of rules within a single Rule Collection Group| 1 MB for Firewall policies created before July 2022<br>2 MB for Firewall policies created after July 2022|
18-
|Number of Rule Collection Groups in a firewall policy|50 for Firewall policies created before July 2022<br>100 for Firewall policies created after July 2022|
18+
|Number of Rule Collection Groups in a firewall policy|50 for Firewall policies created before July 2022<br>60 for Firewall policies created after July 2022|
1919
|Maximum DNAT rules|250 maximum unique destinations (public IP address, port, and protocol)<br><br> The DNAT limitation is due to the underlying platform.<br><br>For example, you can configure 500 UDP rules to the same destination IP address and port (one unique destination), while 500 rules to the same IP address but to 500 different ports exceeds the limit (500 unique destinations).|
2020
|Minimum AzureFirewallSubnet size |/26|
2121
|Port range in network and application rules|1 - 65535|

0 commit comments

Comments
 (0)