liveBook · Manning

Rule collection

As explained in Azure Security

A rule collection is a grouping of one or more Azure Firewall rules managed as a unit.

A rule collection groups one or more Azure Firewall rules so they can be managed together. Collections can also be grouped into rule collection groups. section 3.2.7

Azure Firewall uses collections to organize several rule types:

  • DNAT rule collections manage inbound forwarding from a firewall public IP to internal resources; use them cautiously because they expose internal destinations to external traffic. section 3.2.7
  • Network rule collections group controls for traffic between peered VNets, such as allowing UDP DNS traffic from a source CIDR. section 3.2.7

How Azure Security covers it

How deep it goes
Defines collection hierarchy and demonstrates CLI creation, but stops short of detailed lifecycle management or evaluation internals.
Examples
Uses DNAT-MgmtAccess, Allow-DNS, and Allow-Google collections with Azure CLI commands and representative JSON output.
What it assumes
Assumes an Azure Firewall and basic familiarity with Azure Cloud Shell, addresses, ports, protocols, and resource groups.
What you can do after
Apply it via Azure CLI to create DNAT, network, or application rule collections with explicit traffic parameters.
How it connects
Connects rule collections with Azure Firewall, DNAT rules, network rules, application rules, and rule collection groups.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.