Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters.
Firewall Manager can provide security management for two network architecture types:
- Secured virtual hub
AnAzure Virtual WAN Hub is a Microsoft-managed resource that lets you easily create hub and spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a secured virtual hub. Secured Virtual Hub can be used as a Virtual WAN Hub for connectivity purposes and as such, all existing and future vWAN billing apply.
- Hub virtual network
This is a standard Azure virtual network that you create and manage yourself. You create the hub virtual network that contains the firewall, and peer the spoke virtual networks that contain your workload servers and services.
Azure Firewall Manager
|Azure Firewall Manager Policies||￥ 636 per policy per region|
Azure Firewall Manager Integrations
|Secured Virtual Hubs with 3rd Party Integrations||￥ 2.544 per deployment hour|
Is a partial hour billed as full hour?
Yes, a partial hour is billed as full hour.
How does pricing work for Azure Firewall Manager?
Customers are charged a minimum of one base policy. Depending on how many regions are there, each region is charged ￥636 per policy per region per region. If a child policy is in a single hub, there is no charge, but a base policy will still be charged at ￥636 per policy per region.
Support & SLA
If you have any questions or need help, please visit Azure Support and select self-help service or any other method to contact us for support.
Azure Firewall Manager availability guarantees are included in the SLA of the deployment option chosen, Azure Firewall, VPN Gateway and Virtual vWAN. Please see the Azure Firewall SLA, VPN Gateway and Azure Virtual WAN for more details.