Microsoft Azure → Amazon Web Services
AWS equivalent of Azure Firewall
The closest AWS equivalent of Azure Firewall is AWS Network Firewall.
About Azure Firewall
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Managed, stateful, autoscaling network firewall in Basic, Standard, and Premium tiers, with FQDN filtering, threat intelligence, and (Premium) TLS inspection and IDPS. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Managed network firewall | AWS Network Firewall | Direct match |
Network security & firewalls(1)
Managed network firewall Direct match
AWS Network Firewall maps to Azure Firewall. Both are managed, stateful, autoscaling firewalls with domain filtering, threat intelligence, and intrusion prevention.
- Rules. Network Firewall uses stateless rules plus Suricata-compatible stateful rules (and AWS-managed threat signatures). Azure Firewall uses network, application (FQDN), and DNAT rule collections in a firewall policy, with IDPS and TLS inspection in the Premium tier.
- Deployment. Network Firewall places endpoints in a subnet in each AZ, and you route traffic through them. Azure Firewall is deployed in a hub virtual network (or a secured Virtual WAN hub), with UDRs sending spoke traffic to it.
- Tiers. Azure Firewall comes in Basic (up to 250 Mbps), Standard, and Premium. Network Firewall has a single tier with optional features.