Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters.
Firewall Manager can provide security management for two network architecture types:
- Secured virtual hub
An Azure Virtual WAN Hub is a Microsoft-managed resource that lets you easily create hub and spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a secured virtual hub. Secured Virtual Hub can be used as a Virtual WAN Hub for connectivity purposes and as such, all existing and future vWAN billing apply.
- Hub virtual network
This is a standard Azure virtual network that you create and manage yourself. You create the hub virtual network that contains the firewall, and peer the spoke virtual networks that contain your workload servers and services.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Germany is available to customers and partners who have already purchased this, doing business in the European Union (EU), the European Free Trade Association (EFTA), and in the United Kingdom (UK). It provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure trial.
Prices shown below are at a 50% discount to GA price until 8/1/2020. GA prices will take effect on 8/1/2020
Azure Firewall Manager
|Azure Firewall Manager Policies||$- per policy per region|
Azure Firewall Manager Integrations
|Secured Virtual Hubs with 3rd Party Integrations||$- per deployment hour|
Azure Firewall with Secured Virtual Hub
|Secured Virtual Hubs Deployments||$- per deployment hour|
|Secured Virtual Hubs Data Processed||$- per GB processed|
Azure Firewall with Hub Virtual Network
|Azure Firewall Deployments||$- per deployment hour|
|Azure Firewall Data Processed||$- per GB processed|
Policy pricing logic
No Azure Firewall Manager policy charges will be done for policies that are associated to a single firewall. The following illustration demonstrates that.
- Base Policy: The policy is associated with four firewalls. If these four firewalls are in a single region, the price for the policy is $-/month. However, if these four firewall deployments spans four regions, the price for this policy is $-/month. In summary, firewall policy pricing is fixed at $-/month/region.
- Child Policy 1: The policy is associated with two firewalls. If these two firewalls are in a single region, the price for the policy is $-/month. If these two firewalls deploy spans two regions, the price for the policy is $-/month. In summary, firewall policy pricing is fixed price at $-/month/region.
- Child Policy 2: The policy has no charge as it is associated to a single Secured Hub firewall. Firewall policy is not charged if there is only a single firewall association.
Support & SLA
We provide technical support for all Azure services released to general availability, including Azure Firewall. Support is available through Azure Support starting at $29/month. Billing and subscription management support is provided at no cost.
SLA for Azure Firewall Manager
Azure Firewall Manager availability guarantees are included in the SLA of the deployment option chosen, Azure Firewall, VPN Gateway and Virtual vWAN. Please see the Azure Firewall SLA, VPN Gateway and Azure Virtual WAN for more details. For Secure Virtual Hub deployments with security partner providers, in addition to Firewall Manager SLA, please work with your security partner provider for SLA covering partner provided solution.
Yes, a partial hour is billed as full hour.
Customers are charged a minimum of one base policy. Depending on how many regions are there, each region is charged $- per policy per region per region. If a child policy is in a single hub, there is no charge, but a base policy will still be charged at $- per policy per region.
Estimate your monthly costs for Azure services
Review Azure pricing frequently asked questions
Learn more about Azure Firewall Manager
Review technical tutorials, videos, and more resources