No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Firewall Manager vs Azure Key Vault comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Firewall Manager
Ranking in Microsoft Security Suite
25th
Average Rating
8.6
Reviews Sentiment
5.4
Number of Reviews
9
Ranking in other categories
Firewall Security Management (11th)
Azure Key Vault
Ranking in Microsoft Security Suite
20th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Enterprise Password Managers (1st), Certificate Management Software (1st), Secrets Management Tools (2nd)
 

Mindshare comparison

As of August 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.2%, up from 0.6% compared to the previous year. The mindshare of Azure Key Vault is 2.6%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Mindshare Distribution
ProductMindshare (%)
Azure Key Vault2.6%
Azure Firewall Manager1.2%
Other96.2%
Microsoft Security Suite
 

Featured Reviews

Sikkander  Batcha - PeerSpot reviewer
DevOps Engineer at CloudIQ
Has managed traffic effectively but lacks visibility and advanced control features
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.
Rajthilak BS - PeerSpot reviewer
Associate Vice President (Data Security & Protection - Confidential AI) at Standard Chartered Bank
Have addressed compliance challenges but still struggle with seamless integration of certificate issuance between environments
In terms of Azure Key Vault improvements, we have to compare the competitor. If we consider AWS, our bank has Microsoft PKI, which is a Microsoft product, for the entire digital certificate infrastructure. Even in the cloud, when it is AWS, the internal certificates are MS PKI. When we had a problem, users had to come to on-premise to get a certificate and import it to AWS Certificate Manager and assign it. We wondered why we could not issue the certificate directly from the cloud for cloud users. There was a simple way in AWS. They have a Private Certificate Authority (PCA) and Amazon Certificate Manager. Private Certificate Authority issues certificates to Amazon services. They also provide Amazon Certificate Manager to store and deploy certificates. These are two neat components - one is an issuer and another is storage and deployment solutions for certificates. With PCA, I can directly enable it and get certificates from AWS itself. AWS can issue SSL/TLS certificates if you enable it directly. If you consider Azure, it is not very clear. Even the naming convention, Key Vault, might not suggest that this is a PKI or certificate manager. You cannot issue certificates directly. They have app certificates and did not have a clear-cut certificate management solution in the cloud when I worked at that time. I am not sure whether they have updated Azure Key Vault as a full-fledged PKI solution now. From what I saw, it was not a full-fledged PKI solution. We are not majorly using Azure Key Vault because it is only for storing secrets. If some solutions can provide guidance on how we can maximize leverage, we can immediately look forward to doing that. We already have some business problems we want to solve. While our primary focus is AWS, many of the services such as ADO are running on Azure, and the secondary services are growing bigger.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."
"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."
"The best feature of Azure Firewall Manager is that it is easy to maintain and configure."
"Azure Firewall Manager centralizes network security management with a hub and spoke architecture."
"I would definitely recommend the solution to my clients, especially if one is using Azure Cloud."
"The most valuable feature of Azure Firewall Manager is the testing and configuration."
"The tool's support is good."
"The most valuable feature is the web firewall, as it is easy to install and does not require any plugins for your browser."
"Overall, it's a great product."
"We use Azure Key Vault to store secrets."
"There is advanced data protection available. We're working in a highly regulated environment, and this is essential to us."
"The centralized storage and secure storage are features we like."
"The most valuable feature is that you can retrieve user account details from the cloud."
"The tool is highly secure and very easy to manage."
"The integration with other Azure services is one of the standout features for me. It allows us to use secrets from the Azure Key Vault seamlessly without direct interaction.Additionally, the ability to easily mark secrets for expiration and receive notifications is invaluable."
"The solution can scale up as needed."
 

Cons

"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."
"The cost is a significant concern because we are in a region where the dollar is not our default currency, and converting to dollars makes it very expensive."
"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."
"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."
"The solution can improve the integration with open-source tools."
"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."
"The price is okay. This said, the solution is certainly expensive in comparison with other cloud services."
"For Azure Firewall Manager, the learning curve for new people is a bit challenging, but the integration should be more straightforward for configuring a centralized system."
"The solution's usage can be a little better from the user interface point of view."
"The response time can be improved."
"Microsoft Azure Key Vault could improve by enhancing the security of credentials. Without the security or the use of key vaults, we would have to configure our credentials into the source code as plain text without the encryption or security."
"The skill level of the support staff is also questionable."
"The whole problem of password rotation could be improved. My security area wants to rotate passwords every day, every week, or every month, depending on the services."
"We encountered a few problems where Azure had infrastructure problems like the DMS."
"It would be great if Azure allowed more third-party vendors into the ecosystem."
"While it's very reliable in terms of stability, there's always room for improvement."
 

Pricing and Cost Advice

"The price of the solution is reasonable but it is reasonable for the features."
"The solution is certainly expensive in comparison with other cloud services."
"The price of the solution is reasonable for what we are using it for."
"The pricing is decent. It has a pretty low price. It is a straightforward cost based on usage."
"Key Vault, like every Azure service, has a cost associated with it, but you don't have to spend thousands of dollars to spin up an environment to build a key management system. It's already there."
"Currently, the tool's monthly licensing costs are around 1,800 USD for all the environments combined, including the production and pre-production environments."
"The product is affordable, in my opinion."
"Azure Key Vault is expensive."
"It is a cheap option."
"The product is neither cheap nor expensive."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Financial Services Firm
10%
Computer Software Company
9%
Educational Organization
9%
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise11
Large Enterprise27
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?
The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...
What needs improvement with Azure Firewall Manager?
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from...
What is your primary use case for Azure Firewall Manager?
My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...
Which is better - Azure Key Vault or AWS Secrets Manager?
Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...
What needs improvement with Microsoft Azure Key Vault?
Based on my three years of experience, I believe there have been no updates to Azure Key Vault. I think the product needs upgrades in terms of access control and certification improvements. While A...
 

Also Known As

No data available
Microsoft Azure Key Vault, MS Azure Key Vault
 

Overview

 

Sample Customers

Information Not Available
Adobe, DriveTime, Johnson Controls, HP, InterContinental Hotels Group, ASOS
Find out what your peers are saying about Azure Firewall Manager vs. Azure Key Vault and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.