Try our new research platform with insights from 80,000+ expert users

Azure Firewall vs Microsoft Entra Permissions Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Firewall
Ranking in Microsoft Security Suite
11th
Average Rating
7.4
Reviews Sentiment
6.4
Number of Reviews
42
Ranking in other categories
Firewalls (11th)
Microsoft Entra Permissions...
Ranking in Microsoft Security Suite
31st
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
Cloud Infrastructure Entitlement Management (CIEM) (7th)
 

Mindshare comparison

As of August 2025, in the Microsoft Security Suite category, the mindshare of Azure Firewall is 3.6%, down from 5.0% compared to the previous year. The mindshare of Microsoft Entra Permissions Management is 0.6%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Rashedul Khan - PeerSpot reviewer
Seamless integration enhances security while reducing manual effort
We didn't use TLS termination or malware filtering extensively because those are part of the premium features for Azure Firewall. At this point, I cannot see much improvement needed for Azure Firewall, because it served my purpose; having used it for four months, I am satisfied with the features and performance that I needed for my project. Features that integrate AI functionalities into Azure Firewall could be added, which can also address costing issues. We have features that we require, but they are in the premium offerings. If some features with limitations, for example, limited users, could be made available in the standard Azure Firewall, it would be easier for beginners choosing Azure Firewall at a very first level to test those features without needing to upgrade to premium.
Sameer Bhat - PeerSpot reviewer
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system."
"The SIEM that Azure Firewall provides us is very robust."
"In terms of the reporting, it's beautiful. It integrates with Azure monitoring and with Azure policies. That piece is a big help. You can set governing policies and you can use the application firewall, as well as the Azure Firewall, to enforce those policies."
"Azure Firewall simplifies everything, securing our APIs and systems so that suspicious IPs do not access our sophisticated systems."
"The solution has FQDN integration."
"The feature that I have found the most valuable is the control over the network permissions and the network."
"Azure's cost-effectiveness is its major advantage."
"Microsoft's technical support is very good. They're quite knowledgable and responsive."
"The solution integrates well with our infrastructure and other systems without any issues."
"Multifactor authentication is valuable."
 

Cons

"The tool needs to improve the onboarding and transition process for on-prem users."
"It is a cloud service, but the lending speed for each region is not always the same. For example, in China, the speed is slow. They need to think about how to make sure that the service pace or speed is always the same in all regions. It would be a great improvement if they can provide the same pace worldwide."
"An Azure firewall is not a real firewall."
"In my experience, Azure Firewall is quite expensive, with a high cost. I would rate its pricing a two out of ten."
"For large organizations, a third-party firewall would be an added advantage, because it would have more advanced features, things that are not in Azure Firewall."
"There are a number of things that need to be simplified, but it's mostly costs. It needs to be simplified because it's pretty expensive."
"The threat intelligence aspect of this particular firewall is not at par with other providers."
"This solution is not mature when it comes to handling perimeter traffic like internet browsing."
"The solution's pricing and support services need improvement."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
 

Pricing and Cost Advice

"Azure Firewall is expensive."
"Azure Firewall comes with Azure native services. We did not buy any kind of license for it. Whether you have a free subscription or a pay-as-you-go model, you can deploy the Azure Firewall service... The amount that you use will determine how much you pay."
"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."
"Azure Firewall is more expensive. If Microsoft can make Azure Firewall cheaper, I can see that all clients will think of using it. One client used FortiGate because it is much cheaper. Some clients ask me for Cisco, but in the cloud estimate, I found its cost is the same as Azure Firewall."
"Before choosing this solution, we evaluated others, and we found this to be the most cost-effective."
"Azure Firewall is quite an expensive product."
"The total cost of ownership is much less than Palo Alto, Cisco, or any other brand."
"It is pay-as-you-go. So, you pay based on the usage. If I remember it well, there is a basic fee, and there is a traffic fee. It is not per month. It is per hour or something like that. It is not so expensive."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
"The product cost is in the mid to high range."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
9%
Financial Services Firm
9%
Manufacturing Company
7%
Computer Software Company
18%
Financial Services Firm
14%
Government
9%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include int...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the overall cost is reasonable. Azure Firewall offers a solid threat awareness, can...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate VM integrates well and has excellent centralized reporting. It is very easy to...
What is your experience regarding pricing and costs for Microsoft Entra Permissions Management?
The product cost is in the mid to high range. You need to have a good budget to implement it, so it is considered fairly expensive for our market. I rate the pricing a seven out of ten.
What needs improvement with Microsoft Entra Permissions Management?
The solution's pricing and support services need improvement.
 

Also Known As

No data available
CloudKnox Permissions Management
 

Overview

Find out what your peers are saying about Azure Firewall vs. Microsoft Entra Permissions Management and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.