Skip to content

Commit d278553

Browse files
Merge pull request #249850 from vhorne/fw-standard
Freshness review
2 parents 7118659 + bee3689 commit d278553

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

articles/firewall/features.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: firewall
55
author: vhorne
66
ms.service: firewall
77
ms.topic: conceptual
8-
ms.date: 06/06/2022
8+
ms.date: 08/30/2023
99
ms.author: victorh
1010
---
1111

@@ -62,7 +62,7 @@ For more information about Availability Zones, see [Regions and Availability Zon
6262

6363
## Unrestricted cloud scalability
6464

65-
Azure Firewall can scale out as much as you need to accommodate changing network traffic flows, so you don't need to budget for your peak traffic.
65+
Azure Firewall can scale out as much as you need to accommodate changing network traffic flows, so you don't need to budget for your peak traffic.
6666

6767
## Application FQDN filtering rules
6868

@@ -148,19 +148,19 @@ You can configure Azure Firewall to route all Internet-bound traffic to a design
148148

149149
## Web categories
150150

151-
Web categories lets administrators allow or deny user access to web site categories such as gambling websites, social media websites, and others. Web categories are included in Azure Firewall Standard, but it's more fine-tuned in Azure Firewall Premium. As opposed to the Web categories capability in the Standard SKU that matches the category based on an FQDN, the Premium SKU matches the category according to the entire URL for both HTTP and HTTPS traffic. For more information about Azure Firewall Premium, see [Azure Firewall Premium features](premium-features.md).
151+
Web categories let administrators allow or deny user access to web site categories such as gambling websites, social media websites, and others. Web categories are included in Azure Firewall Standard, but it's more fine-tuned in Azure Firewall Premium. As opposed to the Web categories capability in the Standard SKU that matches the category based on an FQDN, the Premium SKU matches the category according to the entire URL for both HTTP and HTTPS traffic. For more information about Azure Firewall Premium, see [Azure Firewall Premium features](premium-features.md).
152152

153153
For example, if Azure Firewall intercepts an HTTPS request for `www.google.com/news`, the following categorization is expected:
154154

155-
- Firewall Standard – only the FQDN part will be examined, so `www.google.com` will be categorized as *Search Engine*.
155+
- Firewall Standard – only the FQDN part is examined, so `www.google.com` is categorized as *Search Engine*.
156156

157-
- Firewall Premium – the complete URL will be examined, so `www.google.com/news` will be categorized as *News*.
157+
- Firewall Premium – the complete URL is examined, so `www.google.com/news` is categorized as *News*.
158158

159159
The categories are organized based on severity under **Liability**, **High-Bandwidth**, **Business Use**, **Productivity Loss**, **General Surfing**, and **Uncategorized**.
160160

161161
### Category exceptions
162162

163-
You can create exceptions to your web category rules. Create a separate allow or deny rule collection with a higher priority within the rule collection group. For example, you can configure a rule collection that allows `www.linkedin.com` with priority 100, with a rule collection that denies **Social networking** with priority 200. This creates the exception for the pre-defined **Social networking** web category.
163+
You can create exceptions to your web category rules. Create a separate allow or deny rule collection with a higher priority within the rule collection group. For example, you can configure a rule collection that allows `www.linkedin.com` with priority 100, with a rule collection that denies **Social networking** with priority 200. This creates the exception for the predefined **Social networking** web category.
164164

165165

166166

0 commit comments

Comments
 (0)