Azure Firewall Premium
azure.microsoft.com
Spec sheet
- What it does
- Azure Firewall is a managed, cloud-based network security service that protects Azure Virtual Network resources and enforces and logs application and network connectivity policies.Read 11 Oct 2026 · azure.microsoft.com
- Intended users
- Microsoft describes Premium as suitable for highly sensitive and regulated environments, including payment and healthcare industries.Read 11 Oct 2026 · learn.microsoft.com
- Deployment
- Azure Firewall can be set up in the Azure portal or with PowerShell, REST API, or templates.Read 11 Oct 2026 · azure.microsoft.com
- Free plan
- NoRead 21 Sep 2026 · azure.microsoft.com
- Integrations
- Azure Firewall integrates with Azure Monitor, and its logs can be sent to Log Analytics, Azure Storage, or Event Hubs.Read 11 Oct 2026 · azure.microsoft.com
- Availability
- All Azure Firewall SKUs have built-in high availability and support Availability Zones, with no extra charge for multi-zone deployment.Read 11 Oct 2026 · learn.microsoft.com
- Billing
- The pricing page says a fixed hourly fee is charged per firewall deployment regardless of scale, with an additional fee for data processed; a partial hour is billed as a full hour.Read 11 Oct 2026 · azure.microsoft.com
- IDPS
- Premium includes signature-based intrusion detection and prevention with over 67,000 rules across more than 50 categories, and users can customize up to 10,000 rules.Read 11 Oct 2026 · learn.microsoft.com
- Management and automation
- Azure Firewall supports central management through Azure Firewall Manager and DevOps integration using REST, PowerShell, CLI, templates, and Terraform.Read 11 Oct 2026 · learn.microsoft.com
- Network coverage
- Azure Firewall supports filtering inbound and outbound traffic, internal spoke-to-spoke connections, and hybrid connections through Azure VPN and ExpressRoute gateways.Read 11 Oct 2026 · azure.microsoft.com
- Security and compliance
- Microsoft states that Azure Firewall is PCI, SOC, and ISO compliant; Premium adds capabilities typically required for PCI DSS payment processing environments.Read 11 Oct 2026 · learn.microsoft.com
- TLS inspection
- Premium decrypts outbound and east-west TLS traffic for inspection, then re-encrypts it before sending it to its destination.Read 11 Oct 2026 · learn.microsoft.com
- URL filtering
- Premium URL filtering can evaluate the full URL path for HTTP and HTTPS traffic when TLS inspection is enabled.Read 11 Oct 2026 · learn.microsoft.com
- Web categories
- Premium can allow or deny access using website categories and match categories against the full URL for HTTP and HTTPS traffic.Read 11 Oct 2026 · learn.microsoft.com
Plans and prices
Premium deployment Priced on request Premium firewall tier · Fixed deployment charge Read 21 Sep 2026 · azure.microsoft.com
Premium deployment Price not published Premium firewall tier · Fixed deployment charge Read 21 Sep 2026 · azure.microsoft.com
Premium data processing Priced on request Variable traffic-based charge Read 21 Sep 2026 · azure.microsoft.com
Premium data processing Price not published Variable traffic-based charge Read 21 Sep 2026 · azure.microsoft.com
Premium capacity unit Price not published Optional prescaling capacity Read 21 Sep 2026 · azure.microsoft.com
Premium capacity unit Priced on request Optional prescaling capacity Read 21 Sep 2026 · azure.microsoft.com
Azure Firewall Premium Price not published Per deployment hour and per GB processed; the pricing page displays "$-" for both rates. Up to 100 Gbps · 10 Gbps fat flow support · Capacity Unit charges apply if prescaling is enabled Read 11 Oct 2026 · azure.microsoft.com
Where Specifiction places it
- Network Firewall Software#16 of 377.4
- Intrusion Detection and Prevention Software#20 of 397.4
- Firewall Software#60 of 817.5