You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/firewall/firewall-azure-policy.md
+2-80Lines changed: 2 additions & 80 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,86 +8,16 @@ ms.topic: how-to
8
8
ms.date: 09/05/2024
9
9
---
10
10
11
-
<!--
12
-
Remove all the comments in this template before you sign-off or merge to the main branch.
13
-
14
-
This template provides the basic structure of a How-to article pattern. See the
15
-
[instructions - How-to](../level4/article-how-to-guide.md) in the pattern library.
16
-
17
-
You can provide feedback about this template at: https://aka.ms/patterns-feedback
18
-
19
-
How-to is a procedure-based article pattern that show the user how to complete a task in their own environment. A task is a work activity that has a definite beginning and ending, is observable, consist of two or more definite steps, and leads to a product, service, or decision.
Required: Lead with a light intro that describes, in customer-friendly language, what the customer will do. Answer the fundamental “why would I want to do this?” question. Keep it short.
40
-
41
-
Readers should have a clear idea of what they will do in this article after reading the introduction.
42
-
43
-
* Introduction immediately follows the H1 text.
44
-
* Introduction section should be between 1-3 paragraphs.
45
-
* Don't use a bulleted list of article H2 sections.
46
-
47
-
Example: In this article, you will migrate your user databases from IBM Db2 to SQL Server by using SQL Server Migration Assistant (SSMA) for Db2.
48
-
49
-
-->
50
-
51
13
Azure Policy is a service in Azure that allows you to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. Azure Policy does this by evaluating your resources for noncompliance with assigned policies. For example, you can have a policy to allow only a certain size of virtual machines in your environment or to enforce a specific tag on resources.
52
14
53
15
Azure Policy can be used to govern Azure Firewall configurations by applying policies that define what configurations are allowed or disallowed. This helps ensure that the firewall settings are consistent with organizational compliance requirements and security best practices.
54
16
55
-
<!---Avoid notes, tips, and important boxes. Readers tend to skip over them. Better to put that info directly into the article text.
Required: Multiple procedures should be organized in H2 level sections. A section contains a major grouping of steps that help users complete a task. Each section is represented as an H2 in the article.
76
-
77
-
For portal-based procedures, minimize bullets and numbering.
78
-
79
-
* Each H2 should be a major step in the task.
80
-
* Phrase each H2 title as "<verb> * <noun>" to describe what they'll do in the step.
81
-
* Don't start with a gerund.
82
-
* Don't number the H2s.
83
-
* Begin each H2 with a brief explanation for context.
84
-
* Provide a ordered list of procedural steps.
85
-
* Provide a code block, diagram, or screenshot if appropriate
86
-
* An image, code block, or other graphical element comes after numbered step it illustrates.
87
-
* If necessary, optional groups of steps can be added into a section.
88
-
* If necessary, alternative groups of steps can be added into a section.
89
-
90
-
-->
91
21
## Policies available for Azure Firewall
92
22
93
23
The following policies are available for Azure Firewall:
@@ -121,7 +51,7 @@ The following policies are available for Azure Firewall:
121
51
This policy recommends migrating from Firewall Classic Rules to Firewall Policy.
122
52
-**VNET with specific tag must have Azure Firewall Deployed**
123
53
124
-
This policy finds all VNETs with a specified tag and checks if there's an Azure Firewall deployed, and flags it as noncompliant if no Azure Firewall exists.
54
+
This policy finds all virtual networks with a specified tag and checks if there's an Azure Firewall deployed, and flags it as noncompliant if no Azure Firewall exists.
125
55
126
56
The following steps show how you can create an Azure Policy that enforces all Firewall Policies to have the Threat Intelligence feature enabled (either **Alert Only**, or **Alert and deny**). The Azure Policy scope is set to the resource group that you create.
127
57
@@ -178,15 +108,7 @@ Now you attempt to create a Firewall Policy with Threat Intelligence disabled.
178
108
179
109
You should see an error that says your resource was disallowed by policy, confirming that your Azure Policy doesn't allow firewall policies that have Threat Intelligence disabled.
<!-- 5. Next step/Related content------------------------------------------------------------------------
184
-
185
-
Optional: You have two options for manually curated links in this pattern: Next step and Related content. You don't have to use either, but don't use both.
186
-
- For Next step, provide one link to the next step in a sequence. Use the blue box format
187
-
- For Related content provide 1-3 links. Include some context so the customer can determine why they would click the link. Add a context sentence for the following links.
0 commit comments