This Beginner/Intermediate (level 200) hands-on workshop explores practical aspects of designing, deploying, and operating Azure Firewall in real-world environments. By the end of the two days, participants will gain a solid understanding of Azure Firewall capabilities, learn how to implement secure, scalable network architectures using proven design patterns and will have the knowledge and practical experience required to confidently design, deploy, and operate Azure Firewall in production environments.

The workshop begins with an overview of Azure Firewall, its core features, and common enterprise use cases. From there, attendees will deploy and configure Azure Firewall in a hub-and-spoke topology, learning how to integrate it into existing Azure networking designs.

A significant focus is placed on Azure Firewall Policy, its structure, rule processing logic, and best practices for organizing and managing policies at scale. Participants will create and manage both Network and Application rules, gaining clarity on rule evaluation, prioritization, and common configuration pitfalls.

Operational excellence is also covered in depth. The workshop examines SNAT port exhaustion, its causes, impact on workloads, and effective mitigation strategies. Finally, attendees will learn how to monitor Azure Firewall using logs and metrics, enabling visibility, troubleshooting, and proactive performance management.