Skip navigation

Azure Firewall Manager pricing

Central network security policy and route management for globally distributed, software-defined perimeters

Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters. Firewall Manager can provide security management for two network architecture types.

  • Secured virtual hub: An Azure Virtual WAN Hub is a Microsoft-managed resource that lets you easily create hub and spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a secured virtual hub. Secured virtual hub can be used as a virtual WAN hub for connectivity purposes and as such, all existing and future vWAN billing apply.

  • Hub virtual network: This is a standard Azure virtual network that you create and manage yourself. You create the hub virtual network that contains the firewall, and peer the spoke virtual networks that contain your workload servers and services.

Explore pricing options

Apply filters to customise pricing options to your needs.

Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using Thomson Reuters benchmark rates refreshed on the first day of each calendar month. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.

Azure Firewall Manager

Service Type Price
Azure Firewall Manager policies $- per policy per region

Azure Firewall Manager integrations

Service Type Price
Secured Virtual Hubs with third-party integrations $- per deployment hour

Azure Firewall with secured virtual hub

Service Type Price
Secured Virtual Hubs Deployments $- per deployment hour
Secured Virtual Hubs Data Processed $- per GB processed

Azure Firewall with hub virtual network

Service Type Price
Azure Firewall deployments $- per deployment hour
Azure Firewall data processed $- per GB processed

Policy pricing logic

No Azure Firewall Manager policy charges will be made for policies that are associated with a single firewall. The following illustration demonstrates that.

Pricing example

  • Base policy: The policy is associated with four firewalls. If these four firewalls are in a single region, the price for the policy is $-/month. However, if deployment of these four firewalls extends over four regions, the price for this policy is $-/month. In summary, firewall policy pricing is fixed at $-/month/region.
  • Child policy 1: The policy is associated with two firewalls. If these two firewalls are in a single region, the price for the policy is $-/month. If deployment of these two firewalls extends over two regions, the price for the policy is $-/month. In summary, firewall policy pricing is fixed at $-/month/region.
  • Child policy 2: The policy has no charge as it is associated with a single Secured Hub firewall. No charges are made for firewall policies with only a single firewall association.

Azure pricing and purchasing options

Connect with us directly

Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimisation and request a custom proposal.

Talk to a sales specialist

See ways to purchase

Purchase Azure services through the Azure website, a Microsoft representative or an Azure partner.

Explore your options

Additional resources

Azure Firewall Manager details

Learn more about Azure Firewall Manager features and capabilities.

Pricing calculator

Estimate your expected monthly costs for using any combination of Azure products.

SLA

Review the service-level agreement for this product.

Documentation

Review technical tutorials, videos and more Azure Firewall Manager resources.

  • Yes, a partial hour is billed as a full hour.
  • Customers are charged a minimum of one base policy. Depending on how many regions are there, each region is charged $- per policy per region per region. If a child policy is in a single hub, there is no charge, but a base policy will still be charged at $- per policy per region.

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Get free cloud services and $200 in credit to explore Azure for 30 days.

Added to estimate. Press 'v' to view on calculator