Design Azure Application Gateway & Firewall

Подписаться 1,7 тыс.

Просмотров 2,4 тыс.

50% 1

How do you design an Azure landing zone with these two components ?
Is there a benefit in using both ? Stay tuned to find out :)
▬▬ ⏰ Design Azure Application Gateway & Firewall⏰ ▬▬▬▬▬▬▬
00:00 - Introduction
00:28 - Overview: Azure Firewall
01:07 - Overview: Azure Application Gateway
01:32 - Traffic Types Overview
02:43 - Azure Firewall Alone
04:33 - Application Gateway Alone
05:43 - AGW & Firewall Parallel
06:20 - AGW in front of the Azure FW
07:14 - Azure FW in front of AGW
08:07 - Outro
▬▬ ⚓ RESOURCES & LINKS ⚓ ▬▬▬▬▬▬
Firewall and Application Gateway
docs.microsoft.com/en-us/azur...
#AzureInternet #InternetAccess #Azure #Scaling #ApplicationGateway #ZeroTrustArchitecture #ZT #TechLightning #Security #AzureSecurity #PatrikTechLightning #Microsoft #ESLZ #Firewall

Наука

Опубликовано:

23 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 12

@hernanerazo3635 3 месяца назад

Excellent explanation.

@cybersystems2223 Год назад

Hi @Patrik. Is it possible to SSL termination at ApplicationGw when it's behind AzureFirewall? Thank you.

@PatriksTechLightning Год назад

Hi ! Good question and the documentation is lacking to get a definite answer on this. Now, one of the strengths of the AGW is its ability to decrypt packets and search for threats to web applications. I would say that the technology points to the fact that this should be possible. Therefor I'm leaning towards a "yes" but a quick test in the lab is recommended.

@namithcc Год назад

Thank you for the video. One question, let say if i have different env such as dev stage & prod(spokes) and a hub. Can i use single app gatway in hub for all 3 spokes app and a azure fw in hub ( agw before azure firewall)?

@PatriksTechLightning Год назад

Hi there ! Yes, you can use a single app gateway in the hub. But you have to be aware of the limitations, such as maximum one public IP address per Application Gateway. Also, you need to pay close attention how you configure URL's /ports.

@amolwani6823 Год назад

Is there a use case an application gateway in front works fine with a third party network virtual appliance like a Fortigate ?

@PatriksTechLightning Год назад

Hi ! There are documented instances where an Application Gateway works fine in front of a third party NVA (Fortigate/...): github.com/Azure/CanadaPubSecALZ/blob/main/docs/archetypes/hubnetwork-nva-fortigate.md

@maverickshroov 2 года назад

Make some configuration video also It will be very helpful to the people who understands the scenario and try to repo in tha lab... For example config azure appgw after firewall there is no handson lab in RU-vid

@PatriksTechLightning 2 года назад

Thank you for the tip ! I'll put it in my radar to see if I can get to it in a future video.

@wearewhoweare6602 Год назад

Has dis been done? 😢😢😢😢

@zack.123. 4 месяца назад

Great video. I have managed to deploy the AppGW behind the AzFW. This works well but you lose the source client IP. I am however, struggling to implement the AppGW in front of the AzFW. Any impregnation tips or guidance would be very helpful.