liveBook · Manning

Application rule

As explained in Azure Security

An application rule is an Azure Firewall rule that controls outbound traffic from a network to internet destinations at the application level.

An application rule controls outbound traffic from a source network to internet destinations at the application level. Azure Firewall evaluates DNAT rules first, network rules second, and application rules third; unmatched traffic is blocked by default. section 3.2.7

Allow web access to Google

Create an Allow-Google rule in App-Coll01 for 10.0.2.0/24, permitting HTTP on port 80 and HTTPS on port 443 to www.google.com.

How Azure Security covers it

How deep it goes
Defines processing order and demonstrates CLI creation, but does not detail broader policy design or monitoring.
Examples
Uses Allow-Google for 10.0.2.0/24, www.google.com, HTTP 80, and HTTPS 443.
What it assumes
Assumes an Azure Firewall, resource group, source CIDR range, and chosen application protocols and target FQDNs.
What you can do after
Apply it via Azure CLI to permit selected source networks to reach specified web destinations.
How it connects
Connects application rules with DNAT rules, network rules, rule collections, rule collection groups, and Azure Firewall.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.