Network Rules Versus Application Rules for Internal Traffic

This post is about using either Network Rules or Application Rules in Azure Firewall for internal traffic. I’m going to discuss a common scenario, a “problem” that can occur, and how you can deal with that problem.

The Rules Types

There are three kinds of rules in Azure Firewall:

…

19/06/2024 Article Bloggers Aidan Finn

Share:

You may be interested in

Azure Firewall Basic – For Small/Medium Business & “Branch”
Microsoft has just announced a lower cost SKU of Azure Firewall, Basic, that is aimed at small/medium business but could also play a role in “branch office” deployments in Microsoft…
04/10/2022
Get The Diagnostics Logs Names For An Azure Resource
This post will show you how to get the ARM (also for Bicep, Terraform, etc) names of the diagnostics logs for an Azure resource. Problem When you are deploying Azure…
28/02/2023
Your Azure Migration Project Is Doomed To Fail
That heading is a positive way to get your holiday spirit going, eh? I’m afraid I’m going to be your Festive Tech Calendar 2022 Grinch and rain doom and gloom…
03/12/2022
Day Two Devops – Azure VNets Don’t Exist
I had the pleasure of chatting with Ned Bellavance and Kyler Middleton on Day Two DevOps one evening recently to discuss the basics of Azure networking, using my line “Azure…
28/05/2025
Will International Events Impact Cloud Computing
You must have been hiding under a rock if you haven’t noticed how cloud computing has become the default in IT. I have started to wonder about the future of…
09/01/2025
Building A Hub & Spoke Using Azure Virtual Network Manager
In this post, I will show how to use Azure Virtual Network Manager (AVNM) to enforce peering and routing policies in a zero-trust hub-and-spoke Azure network. The goal will be…
07/07/2025
18th Microsoft Most Valuable Professional Award
I found out yesterday that I was awarded my 18th annual Most Valuable Professional (MVP) award by Microsoft, continuing with the Azure Networking expertise. It’s been an interesting year since…
11/07/2025
Cannot Remove Subnet Because of App Service VNet Integration
Here I will describe how you can deal with an issue where you cannot delete a subnet from a VNet after deleting an Azure App Service or Function App with…
13/02/2023
Manage Existing Azure Firewall With Firewall Policy Using Bicep
In this post, I want to discuss how I recently took over the management of an existing Azure Firewall using Firewall Policy/Azure Firewall Manager and Bicep. Background We had a…
10/12/2024
Azure Route Server Saves The Day
In this post, I will discuss a recent scenario where we used Azure Route Server branch-to-branch routing to rescue a client. The Original Network Design This client is a large…
30/07/2024
Enabling Virtual Network Flow Logs At Scale
In this post, I will explain how you can enable Virtual Network (VNet) Flow Logs at scale using a built-in Azure Policy. Background Flow logging plays an essential role in…
24/09/2025
What Happens When An Azure Region Is Destroyed?
This is a topic that has been “top of mind” (I sound like a management consulting muppet) recently: how can I recover from an Azure region being destroyed? Why Am…
31/01/2025