Azure Firewall

AzureNetworking

Cloud-native, stateful firewall-as-a-service with built-in high availability, unrestricted scale, threat intelligence-based filtering, and centralised policy

Jurisdictional exposure

Provider HQ
USRedmond, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther74 regions across 7 jurisdictions
Sovereign option
Yes — 13 sovereign-flagged regions available

Attributes

SLA Uptime
99.99%
Threat Intelligence
Yes
TLS Inspection
Yes

Sub-services (3)

Azure Firewall Premium

TLS inspection and IDPS threat detection

Azure Firewall Basic

Essential protection for low-throughput needs

Firewall Manager

Central management of firewall policies

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

74 regions
36 countries
13sovereign
Sovereign regions (13)
  • Australia Central · CanberraAzure Australia Government
  • Australia Central 2 · CanberraAzure Australia Government
  • US Gov Virginia · VirginiaAzure Government (US)
  • US Gov Arizona · ArizonaAzure Government (US)
  • US Gov Texas · TexasAzure Government (US)
  • US DoD East · VirginiaAzure Government (US DoD regions)
  • US DoD Central · IowaAzure Government (US DoD regions)
  • China North (Beijing) · BeijingMicrosoft Azure operated by 21Vianet
  • China East (Shanghai) · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 2 · BeijingMicrosoft Azure operated by 21Vianet
  • China East 2 · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 3 · HebeiMicrosoft Azure operated by 21Vianet
  • China East 3 · ShanghaiMicrosoft Azure operated by 21Vianet
Commercial regions (61)

Europe (21)

  • Austria East
  • Belgium Central
  • Denmark East
  • Finland Central
  • France South
  • France Central
  • Germany North
  • Germany West Central
  • Greece Central
  • North Europe
  • Italy North
  • West Europe
  • Norway East
  • Norway West
  • Poland Central
  • Spain Central
  • Sweden Central
  • Switzerland West
  • Switzerland North
  • UK West
  • UK South

North America (13)

  • Canada East
  • Canada Central
  • Mexico Central
  • West US
  • East US 3
  • North Central US
  • Central US
  • West US 3
  • South Central US
  • East US
  • East US 2
  • West US 2
  • West Central US

South America (3)

  • Brazil Southeast
  • Brazil South
  • Chile Central

Asia (14)

  • East Asia
  • South India
  • India South Central
  • Jio India West
  • West India
  • Jio India Central
  • Central India
  • Indonesia Central
  • Japan West
  • Japan East
  • Malaysia West
  • Southeast Asia
  • Korea South
  • Korea Central

Oceania (3)

  • Australia East
  • Australia Southeast
  • New Zealand North

Middle East (5)

  • Israel Central
  • Qatar Central
  • Saudi Arabia Central
  • UAE Central
  • UAE North

Africa (2)

  • South Africa West
  • South Africa North

Tags

Equivalent services on other platforms

AWS Network FirewallAWS

Managed stateful firewall, IDS/IPS, and TLS inspection service deployed as VPC endpoints with Suricata-compatible rule syntax, AWS Managed Threat Signatures rule groups, and centralised deployment via AWS Firewall Manager across Organizations

Cloudflare Network FirewallCloudflare

Cloud firewall-as-a-service that filters and inspects network-layer traffic across Cloudflare's network for sites connected via Magic Transit or Cloudflare WAN. Formerly Magic Firewall; Enterprise only.

Cloud Temple Managed FirewallCloud Temple

Fully managed next-generation firewall in an active/passive HA cluster, in a Stormshield edition (ANSSI-qualified) or Fortinet edition, operated 24/7 by Cloud Temple with changes via change management; billed monthly per HA cluster

Google Cloud Next Generation FirewallGCP

Managed next-generation firewall for VPC networks with L7 inspection, IDPS threat signatures (Palo Alto-powered), TLS interception, hostname-based egress rules, and unified policy management across networks and organisations

Hetzner Cloud FirewallsHetzner

Stateful network firewalls applied to cloud servers via labels, with reusable rule sets across server fleets

IONOS Network Security GroupsIONOS

Centrally managed firewall rule sets for a virtual data centre, applied to VMs and NICs that are members of the group to filter ingress and egress traffic

OCI Network FirewallOracle

Managed next-generation firewall service powered by Palo Alto Networks VM-Series, with application awareness, TLS inspection, URL filtering, intrusion prevention (IPS), DNS security, and deployment flexibility across VCN or Transit Hub topologies

Pricing

Pricing model:pay-as-you-go