Azure Firewall has many features such as FQDN filtering, threat intelligence, and IDPS that comes with the premium usage. The threat intelligence feature is what I favor the most because it uses AI to help identify threats and take proactive measures. When we had a product launch that was globally used with certain workloads running on Azure, we used the threat intelligence feature to automatically recognize malicious IP addresses and potential loopholes that could compromise my application. The threat intelligence feature automatically allowed and denied malicious traffic and generated logs through which we had alerts already set up to notify the respective owners about malicious IPs attempting to gain access. Threat intelligence does not work as an antivirus but allows us to define and know what malicious IP addresses and domains are, and prevent communications with them. Azure Firewall really helped us to protect our environment, and with features such as threat intelligence, it helped us implement an automation where malicious IP addresses or domains are automatically identified and blocked. Azure Firewall helped us secure our environment and suspend suspicious IP addresses or suspicious traffic attempting to gain access. Through its logs features, we were able to write queries to identify which applications are being attacked most and implement more security features on top of that. Azure Firewall helped us secure our environment and reduce manual effort, and it also reduced the risk of vulnerabilities.
