Skip to content

Commit beb3ecd

Browse files
committed
Gopi tech review
1 parent 3ac4386 commit beb3ecd

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/firewall/long-running-sessions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ Azure Firewall scales up\down based on throughput and CPU usage. Scale down is p
2727

2828
### Drops during maintenance
2929

30-
The Azure Firewall engineering team updates the firewall on an as-needed basis (usually every month), generally during night time hours in the local time-zone for that region. Updates include security patches, bug fixes, and new feature roll outs that are applied by configuring the firewall in a rolling update mode. The firewall instances are put in a drain mode before reimaging them to give short-lived sessions time to drain. Long running sessions remaining on an instance after the drain period are dropped during the restart.
30+
The Azure Firewall engineering team updates the firewall on an as-needed basis (usually every month), generally during night time hours in the local time-zone for that region. Updates include security patches, bug fixes, and new feature roll outs that are applied by configuring the firewall in a [rolling update mode](https://azure.microsoft.com/en-us/blog/deployment-strategies-defined/). The firewall instances are put in a drain mode before reimaging them to give short-lived sessions time to drain. Long running sessions remaining on an instance after the drain period are dropped during the restart.
3131

3232
### Drops due to idle timeout
3333

@@ -39,7 +39,7 @@ Azure Firewall constantly monitors VM instances and recovers them automatically
3939

4040
## Using applications sensitive to TCP session resets
4141

42-
Session drops aren't a problem when applications are built with network resilience to auto-reconnect disconnected sessions. However, there are few applications (like traditional SAP GUI and SAP RFC based apps) which are sensitive to sessions resets. If you have sensitive applications, you should avoid using them with Azure Firewall. Instead, implement security using Network Security Groups (NSGs).
42+
Session disconnection isn’t an issue for resilient applications that can handle session reset gracefully. However, there are few applications (like traditional SAP GUI and SAP RFC based apps) which are sensitive to sessions resets. Secure such sensitive applications using Network Security Groups (NSGs).
4343

4444
## Network security groups
4545

0 commit comments

Comments
 (0)