Azure Firewall Manager pricing

Central network security policy and route management

Azure Firewall Manager Preview is a security management service that provides central security policy and route management for cloud-based security perimeters.

Firewall Manager can provide security management for two network architecture types:

  • Secured virtual hub

    An Azure Virtual WAN hub is a Microsoft-managed resource that lets you easily create hub and spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a secured virtual hub. Secured virtual hub can be used as a Virtual WAN hub for connectivity purposes and as such, all existing and future vWAN billing apply.

  • Hub virtual network

    This is a standard Azure virtual network that you create and manage yourself. You create the hub virtual network that contains the firewall, and peer the spoke virtual networks that contain your workload servers and services.

Azure Firewall Manager

Service Type Price
Azure Firewall Manager policies $50 per policy per region

Prices include 50% public preview discount

Azure Firewall Manager integrations

Service Type Price
Secured Virtual Hubs with Third-party Integrations $0.2 per deployment hour

Prices include 50% public preview discount

Azure Firewall with secured virtual hub

Service Type Price
Secured Virtual Hubs Deployments $0.625 per deployment hour
Secured Virtual Hubs Data Processed $0.008 per GB processed

Prices include 50% public preview discount

Azure Firewall with hub virtual network

Service Type Price
Azure Firewall deployments $- per deployment hour
Azure Firewall data processed $- per GB processed

GA billing applies to Azure Firewall in a virtual network even when used with Azure Firewall Manager policy

Policy pricing logic

No Azure Firewall Manager policy charges will be done for policies that are used by a single hub. The following illustration demonstrates that.

Pricing example

  • Base Policy: Assuming it is all in one region, then $50 per policy per region. If there is more than 1 region, then $50 per policy per region per region. Number of hubs using this policy is 4.
  • Child Policy 1: Assuming it is all in one region, then $50 per policy per region. If there is more than 1 region, then $50 per policy per region per region. Number of hubs using this policy is 2.
  • Child Policy 2: No charge as it is used by a single hub only. The base policy will still be charged as defined above.

Support and SLA

We provide technical support for all Azure services released to general availability, including Azure Firewall. Support is available through Azure Support starting at $29/month. Billing and subscription management support is provided at no cost.

SLA is not available during the public preview of Azure Firewall Manager. SLA will become available with general availability of the service.

FAQ

  • Yes, a partial hour is billed as a full hour.
  • Customers are charged a minimum of one base policy. Depending on how many regions are there, each region is charged $50 per policy per region per region. If a child policy is in a single hub, there is no charge, but a base policy will still be charged at $50 per policy per region.

Resources

Estimate your monthly costs for Azure services

Review Azure pricing frequently asked questions

Learn more about Azure Firewall Manager

Review technical tutorials, videos and more resources

Added to estimate. Press 'v' to view on calculator

Learn and build with $200 in credit, and keep going for free