Static firewall policies are not fit for the cloud
The static nature of firewall policies poses significant security and business challenges for protecting Azure resources.
Lack of context
Without context, understanding how cloud resources communicate and what connections are valid is difficult.
No elasticity
If the right security policy isn't available for new cloud workloads, you run the risk of breaking applications.
Blind spots
Without a view of how applications interact or are secured, you are left unaware of exposure to risks.
Easily see traffic and define policy
See and understand traffic flows based on metadata (labels and tags) and use those insights to build Zero Trust policies.
Scale security with cloud adoption
Policy automatically adapts to changes in your Azure deployment, ensuring consistent and correct security.
Centralize control across hybrid IT
Unified policy and visibility connecting east-west and perimeter controls ensures holistic protection across environments.
Illumio for Azure Firewall features
Label-based firewall policy
Define Azure Firewall policy using Azure tags — security rules benefit from the same context as the resources they are protecting, significantly simplifying policy authoring.
Enhanced visibility
Combine real-time connection data from Azure Firewall and NSGs with resource tags to build an application dependency map to better understand interactions between resources.
Security rule simulation
Visualize the effect of new rules ”pre-install” by virtually applying them to existing flows to ensure that changes will not break critical connectivity or allow unnecessary access.
Automated provisioning
Integrate policy authoring, visibility, and rule simulation capabilities into existing automation and orchestration workflows to ”shift left” security.
Related Resources
Illumio for Azure Firewall
Learn how to protect your Azure deployment with total visibility and Zero Trust Segmentation.
6 Steps to a Zero Trust Model
Learn a practical approach and best practices for progressing your Zero Trust security program.
