{"id":666,"date":"2020-05-11T00:00:00","date_gmt":"2020-05-11T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection"},"modified":"2025-06-29T23:33:12","modified_gmt":"2025-06-30T06:33:12","slug":"use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/","title":{"rendered":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>This post was co-authored by Pavithra Thiruvengadam, Program Manager, Windows Virtual Desktop<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance. Many employees aren&#8217;t protected by the layered security policies associated with on-premises services while working from home. Virtual desktop infrastructure (VDI) deployments on Azure can help organizations rapidly respond to this changing environment.&nbsp; However, you need a way to protect inbound or outbound internet access to and from these VDI deployments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-desktop\/overview\" target=\"_blank\" rel=\"noopener\">Windows Virtual Desktop<\/a> is a comprehensive desktop and application virtualization service running in Azure. It\u00e2\u20ac\u2122s the only VDI that delivers simplified management, multi-session Windows 10, and optimizations for Office 365. You can deploy and scale your Windows desktops and apps on Azure in minutes and get built-in security and compliance features. In this post, we explore how to use <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/firewall\/overview\" target=\"_blank\" rel=\"noopener\">Azure Firewall<\/a> for secure and cost-effective Windows Virtual Desktop protection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"windows-virtual-desktop-components\">Windows Virtual Desktop components<\/h2>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\" alt=\" Windows Virtual Desktop high level architecture\" style=\"border-radius:0px\" title=\"\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The Windows Virtual Desktop service is delivered in a shared responsibility model:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><strong>Customer-managed RD clients<\/strong> connect to Windows desktops and applications from their favorite client device from anywhere on the internet.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Microsoft-managed Azure service<\/strong> handles connections between <strong>RD clients<\/strong> and <strong>Windows Virtual Machines<\/strong> in Azure (including Windows 10 multi-session).<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Customer-managed<\/strong> virtual network in Azure hosts <strong>Windows 10 multi-session virtual machines<\/strong> in host pools.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Windows Virtual Desktop doesn&#8217;t require you to open any inbound access to your virtual network. However, to ensure platform connectivity between customer-managed virtual machines and the service, a set of outbound network connections must be enabled for the host pool virtual network. While these dependencies can be configured using <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-network\/security-overview\">Network Security Groups<\/a>, this configuration is limited to network-level traffic filtering only. For application-level protection, you can use <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/firewall\/overview\" target=\"_blank\" rel=\"noopener\">Azure Firewall<\/a> or a third party network virtual appliance (NVA). For best practices to consider before deploying an NVA, see <a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/best-practices-to-consider-before-deploying-a-network-virtual-appliance\/\" target=\"_blank\" rel=\"noopener\">Best practices to consider before deploying a network virtual appliance<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/fa02da88-6429-4d22-90a7-1e7926d5a311.webp\" alt=\"Azure Firewall protecting Windows Virtual Desktop \" style=\"border-radius:0px\" title=\"\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"host-pool-outbound-access-to-windows-virtual-desktop\">Host pool outbound access to Windows Virtual Desktop<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Firewall is a cloud-native firewall as a service (FWaaS) offering that allows you to centrally govern and log all your traffic flows using a DevOps approach. The service supports both application and network-level filtering rules and is integrated with the Microsoft Threat Intelligence feed for filtering known malicious IP addresses and domains. Azure Firewall is highly available with built-in auto scaling.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Azure Firewall provides a Windows Virtual Desktop FQDN Tag to simplify host pool outbound access to Windows Virtual Desktop. Use the following steps to allow outbound platform traffic:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Deploy Azure Firewall and configure your Windows Virtual Desktop host pool subnet User Defined Route (UDR) to route all traffic via the Azure Firewall.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Create an application rule collection and add a rule to enable the <strong>WindowsVirtualDesktop<\/strong> FQDN tag. The source IP address range is the host pool virtual network, the protocol is https, and the destination is <strong>WindowsVirtualDesktop<\/strong>.<\/li>\n<\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/78abb68f-803b-4738-a7ed-c85c56002a4e.webp\" alt=\"Windows Virtual Desktop FQDN Tag in Azure Firewall \" style=\"border-radius:0px\" title=\"\" \/><\/figure>\n<\/blockquote>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">The set of required storage and service bus accounts for your Windows Virtual Desktop host pool is deployment specific and isn&#8217;t yet captured in the WindowsVirtualDesktop FQDN tag. Additionally, a network rule collection is needed to allow DNS access from your Active Directory Domain Services (ADDS) deployment and KMS access from your virtual machines to Windows Activation Service. To configure access for these additional dependencies, see <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/firewall\/protect-windows-virtual-desktop\" target=\"_blank\" rel=\"noopener\">Use Azure Firewall to protect Windows Virtual Desktop deployments<\/a>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"host-pool-outbound-access-to-the-internet\">Host pool outbound access to the internet<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on your organization needs, you may want to enable secure outbound internet access for your end users. As Windows Virtual Desktop sessions are running on customer-managed virtual machines, they are also subject to your virtual network security controls. In cases where the list of allowed destinations is well-defined (for example, <a href=\"https:\/\/docs.microsoft.com\/Office365\/Enterprise\/office-365-ip-web-service\">Office 365 access<\/a>), you can use Azure Firewall application and network rules to configure the required access. This routes end-user traffic directly to the internet for best performance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you want to filter outbound user internet traffic using an existing on-premises secure web gateway, you can configure web browsers or other applications running on the Windows Virtual Desktop host pool with an explicit proxy configuration. For example, see <a href=\"https:\/\/docs.microsoft.com\/deployedge\/edge-learnmore-cmdline-options-proxy-settings\" target=\"_blank\" rel=\"noopener\">How to use Microsoft Edge command-line options to configure proxy settings<\/a>. These proxy settings only influence your end-user internet access, allowing outbound traffic directly via Azure Firewall.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"next-steps\">Next steps<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For more information on everything we covered above please see the following blogs, documentation, and videos.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-desktop\/overview\" target=\"_blank\" rel=\"noopener\">What is Windows Virtual Desktop<\/a>?<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/firewall\/\" target=\"_blank\" rel=\"noopener\">Azure Firewall documentation<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/firewall\/protect-windows-virtual-desktop\" target=\"_blank\" rel=\"noopener\">Use Azure Firewall to protect Windows Virtual Desktop deployments<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Azure Firewall February 2020 blog: <a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/new-azure-firewall-certification-and-features-in-q1-cy2020\/\" target=\"_blank\" rel=\"noopener\">New Azure Firewall certification and features in Q1 CY2020<\/a>.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1457,1459],"tags":[],"audience":[3053,3056],"content-type":[1511],"product":[1480],"tech-community":[],"topic":[],"coauthors":[275],"class_list":["post-666","post","type-post","status-publish","format-standard","hentry","category-networking","category-security","audience-it-decision-makers","audience-it-implementors","content-type-best-practices","product-azure-firewall","review-flag-anywh-1680286580-635","review-flag-new-1680286579-546"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-11T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-30T06:33:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\" \/>\n<meta name=\"author\" content=\"Yair Tor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yair Tor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/yair-tor\/\",\"@type\":\"Person\",\"@name\":\"Yair Tor\"}],\"headline\":\"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection\",\"datePublished\":\"2020-05-11T00:00:00+00:00\",\"dateModified\":\"2025-06-30T06:33:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\"},\"wordCount\":758,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\",\"articleSection\":[\"Networking\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\",\"name\":\"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\",\"datePublished\":\"2020-05-11T00:00:00+00:00\",\"dateModified\":\"2025-06-30T06:33:12+00:00\",\"description\":\"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Networking\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/networking\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117\",\"name\":\"shakir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"caption\":\"shakir\"},\"sameAs\":[\"https:\/\/azure.microsoft.com\"],\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog","description":"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/","og_locale":"en_US","og_type":"article","og_title":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog","og_description":"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2020-05-11T00:00:00+00:00","article_modified_time":"2025-06-30T06:33:12+00:00","og_image":[{"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp","type":"","width":"","height":""}],"author":"Yair Tor","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Yair Tor","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/yair-tor\/","@type":"Person","@name":"Yair Tor"}],"headline":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection","datePublished":"2020-05-11T00:00:00+00:00","dateModified":"2025-06-30T06:33:12+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/"},"wordCount":758,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp","articleSection":["Networking","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/","name":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp","datePublished":"2020-05-11T00:00:00+00:00","dateModified":"2025-06-30T06:33:12+00:00","description":"Work from home policies require many IT organizations to address fundamental changes in capacity, network, security, and governance.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#primaryimage","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2020\/05\/8a177079-5ce9-44bd-97bb-ebcc6c30eaa0.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-firewall-for-secure-and-cost-effective-windows-virtual-desktop-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"Networking","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/networking\/"},{"@type":"ListItem","position":3,"name":"Use Azure Firewall for secure and cost-effective Windows Virtual Desktop protection"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117","name":"shakir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4","url":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","caption":"shakir"},"sameAs":["https:\/\/azure.microsoft.com"],"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=666"}],"version-history":[{"count":1,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/666\/revisions"}],"predecessor-version":[{"id":44412,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/666\/revisions\/44412"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=666"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=666"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=666"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=666"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=666"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=666"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}