You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/firewall/features.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: firewall
5
5
author: vhorne
6
6
ms.service: firewall
7
7
ms.topic: conceptual
8
-
ms.date: 06/06/2022
8
+
ms.date: 08/30/2023
9
9
ms.author: victorh
10
10
---
11
11
@@ -62,7 +62,7 @@ For more information about Availability Zones, see [Regions and Availability Zon
62
62
63
63
## Unrestricted cloud scalability
64
64
65
-
Azure Firewall can scale out as much as you need to accommodate changing network traffic flows, so you don't need to budget for your peak traffic.
65
+
Azure Firewall can scale out as much as you need to accommodate changing network traffic flows, so you don't need to budget for your peak traffic.
66
66
67
67
## Application FQDN filtering rules
68
68
@@ -148,19 +148,19 @@ You can configure Azure Firewall to route all Internet-bound traffic to a design
148
148
149
149
## Web categories
150
150
151
-
Web categories lets administrators allow or deny user access to web site categories such as gambling websites, social media websites, and others. Web categories are included in Azure Firewall Standard, but it's more fine-tuned in Azure Firewall Premium. As opposed to the Web categories capability in the Standard SKU that matches the category based on an FQDN, the Premium SKU matches the category according to the entire URL for both HTTP and HTTPS traffic. For more information about Azure Firewall Premium, see [Azure Firewall Premium features](premium-features.md).
151
+
Web categories let administrators allow or deny user access to web site categories such as gambling websites, social media websites, and others. Web categories are included in Azure Firewall Standard, but it's more fine-tuned in Azure Firewall Premium. As opposed to the Web categories capability in the Standard SKU that matches the category based on an FQDN, the Premium SKU matches the category according to the entire URL for both HTTP and HTTPS traffic. For more information about Azure Firewall Premium, see [Azure Firewall Premium features](premium-features.md).
152
152
153
153
For example, if Azure Firewall intercepts an HTTPS request for `www.google.com/news`, the following categorization is expected:
154
154
155
-
- Firewall Standard – only the FQDN part will be examined, so `www.google.com`will be categorized as *Search Engine*.
155
+
- Firewall Standard – only the FQDN part is examined, so `www.google.com`is categorized as *Search Engine*.
156
156
157
-
- Firewall Premium – the complete URL will be examined, so `www.google.com/news`will be categorized as *News*.
157
+
- Firewall Premium – the complete URL is examined, so `www.google.com/news`is categorized as *News*.
158
158
159
159
The categories are organized based on severity under **Liability**, **High-Bandwidth**, **Business Use**, **Productivity Loss**, **General Surfing**, and **Uncategorized**.
160
160
161
161
### Category exceptions
162
162
163
-
You can create exceptions to your web category rules. Create a separate allow or deny rule collection with a higher priority within the rule collection group. For example, you can configure a rule collection that allows `www.linkedin.com` with priority 100, with a rule collection that denies **Social networking** with priority 200. This creates the exception for the pre-defined**Social networking** web category.
163
+
You can create exceptions to your web category rules. Create a separate allow or deny rule collection with a higher priority within the rule collection group. For example, you can configure a rule collection that allows `www.linkedin.com` with priority 100, with a rule collection that denies **Social networking** with priority 200. This creates the exception for the predefined**Social networking** web category.
0 commit comments