Skip to content

Commit fd93ca6

Browse files
Merge pull request #282054 from vhorne/fwm-rule-proc
freshness review
2 parents 0be6024 + edbc88b commit fd93ca6

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/firewall-manager/rule-processing.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: firewall-manager
55
author: vhorne
66
ms.service: firewall-manager
77
ms.topic: conceptual
8-
ms.date: 04/06/2023
8+
ms.date: 07/29/2024
99
ms.author: victorh
1010
---
1111

@@ -15,12 +15,12 @@ Azure Firewall has NAT rules, network rules, and applications rules. The rules a
1515

1616
## Network rules and applications rules
1717

18-
Network rules are applied first, then application rules. The rules are terminating. So if a match is found in network rules, then application rules aren't processed. If no network rule matches, and if the packet protocol is HTTP/HTTPS, application rules then evaluate the packet. If still no match is found, then the packet is evaluated against the infrastructure rule collection. If there's still no match, then the packet is denied by default.
18+
Network rules are applied first, then application rules. The rules are terminating. So if a match is found in network rules, then application rules aren't processed. If no network rule matches, and if the packet protocol is HTTP/HTTPS, application rules then evaluate the packet. If still no match is found, then the packet is evaluated against the infrastructure rule collection. If there's still no match, then the packet is denied by default.
1919

2020
![General rule processing logic](media/rule-processing/rule-logic-processing.png)
2121

2222
### Example of processing logic
23-
Example scenario: three rule collection groups exist in an Azure Firewall Policy. Each rule collection group has a series of application and network rules.
23+
Example scenario: three rule collection groups exist in an Azure Firewall Policy. Each rule collection group has a series of application and network rules.
2424

2525
![Rule execution order](media/rule-processing/rule-execution-order.png)
2626

0 commit comments

Comments
 (0)