Amazon Web Services → Microsoft Azure
Azure equivalent of AWS Network Firewall
AWS Network Firewall maps to Azure Firewall.
About AWS Network Firewall
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Managed, stateful network firewall and IPS for VPCs, with Suricata-compatible rules, domain filtering, TLS inspection, and AWS-managed threat signatures. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Managed network firewall | Azure Firewall | Direct match |
Network security & firewalls(1)
Managed network firewall Direct match
AWS Network Firewall maps to Azure Firewall. Both are managed, stateful, autoscaling firewalls with domain filtering, threat intelligence, and intrusion prevention.
- Rules. Network Firewall uses stateless rules plus Suricata-compatible stateful rules (and AWS-managed threat signatures). Azure Firewall uses network, application (FQDN), and DNAT rule collections in a firewall policy, with IDPS and TLS inspection in the Premium tier.
- Deployment. Network Firewall places endpoints in a subnet in each AZ, and you route traffic through them. Azure Firewall is deployed in a hub virtual network (or a secured Virtual WAN hub), with UDRs sending spoke traffic to it.
- Tiers. Azure Firewall comes in Basic (up to 250 Mbps), Standard, and Premium. Network Firewall has a single tier with optional features.