Central network security policy and route management for globally distributed, software-defined perimeters
Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters. In Azure Firewall Manager, you can manage Azure DDoS Protection plans and Azure Web Application Firewall (WAF) policies alongside your Azure Firewall deployments. Firewall Manager can provide security management for two network architecture types.
- There is no cost for Azure Firewall Manager. You are only charged for the policies and deployments created through Azure Firewall Manager.
- Secured virtual hub: An Azure Virtual WAN Hub is a Microsoft-managed resource that lets you easily create hub and spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a secured virtual hub. Secured Virtual Hub can be used as a Virtual WAN Hub for connectivity purposes and as such, all existing and future vWAN billing apply.
- Hub virtual network: This is a standard Azure virtual network that you create and manage yourself. You create the hub virtual network that contains the firewall, and peer the spoke virtual networks that contain your workload servers and services.
Explore pricing options
Apply filters to customise pricing options to your needs.
Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month autumn on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the forthcoming month. Sign in to the Azure pricing calculator to see pricing based on your current programme/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Firewall Policies
| Service Type | Price |
|---|---|
| Azure Firewall policies | $- per policy per region |
| Policy Analytics (monthly enablement fee)* | $- per policy per month** |
Azure Firewall Manager Deployments
| Service Type | Price |
|---|---|
| Secured Virtual Hubs with 3rd Party Integrations | $- per deployment hour |
Azure Firewall
| Basic | Standard | Premium | |
|---|---|---|---|
| Deployment | $- per deployment hour | $- per deployment hour | $- per deployment hour |
| Data Processing | $- per GB processed | $- per GB processed | $- per GB processed |
Azure Firewall with Secured Virtual Hub
| Basic | Standard | Premium | |
|---|---|---|---|
| Secured Virtual Hubs Deployments | $- per deployment hour | $- per deployment hour | $- per deployment hour |
| Secured Virtual Hubs Data Processed | $- per GB processed | $- per GB processed | $- per GB processed |
Azure DDoS Protection
Azure DDoS Protection pricing will apply to any DDoS protection plans deployed through Azure Firewall Manager. Please refer to the pricing page for more details on Azure DDoS Protection pricing.
Azure Web Application Firewall (WAF)
Azure Web Application Firewall (WAF) pricing will apply to any policies deployed through Azure Firewall Manager. Please refer to the pricing page for more details on Azure WAF pricing.
Policy pricing logic
No Azure Firewall Manager policy charges will be done for policies that are associated to a single firewall. The following illustration demonstrates that.
Pricing example
- Base Policy: The policy is associated with four firewalls. If these four firewalls are in a single region, the price for the policy is $-/month. However, if these four firewall deployments spans four regions, the price for this policy is $-/month. In summary, firewall policy pricing is fixed at $-/month/region.
- Child Policy 1: The policy is associated with two firewalls. If these two firewalls are in a single region, the price for the policy is $-/month. If these two firewalls deploy spans two regions, the price for the policy is $-/month. In summary, firewall policy pricing is fixed price at $-/month/region.
- Child Policy 2: The policy has no charge as it is associated to a single Secured Hub firewall. Firewall policy is not charged if there is only a single firewall association.
Azure pricing and purchasing options
Connect with us directly
Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimisation and request a customised proposal.
Talk to a sales specialistSee ways to purchase
Purchase Azure services through the Azure website, a Microsoft representative or an Azure partner.
Explore your optionsAdditional resources
Azure Firewall Manager
Learn more about Azure Firewall Manager features and capabilities.
Pricing calculator
Estimate your expected monthly costs for using any combination of Azure products.
SLA
Review the Service Level Agreement for Azure Firewall Manager.
Documentation
Review technical tutorials, videos, and more Azure Firewall Manager resources.
Frequently asked questions
-
Yes, a partial hour is billed as full hour.
-
There is no cost for Azure Firewall Manager. You are only charged for the policies and deployments created through Azure Firewall Manager.
For Firewall policies, customers are charged a minimum of one base policy. Depending on how many regions are there, each region is charged $- per policy per region per region. If a child policy is in a single hub, there is no charge, but a base policy will still be charged at $- per policy per region. Azure DDoS Protection pricing will apply to any DDoS protection plans deployed through Azure Firewall Manager. Azure Web Application Firewall (WAF) pricing will apply to any policies deployed through Azure Firewall Manager.
Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.
Get free cloud services and a $200 credit to explore Azure for 30 days.