Skip to content

Commit

Permalink
Enabling Azure Firewall premium in usgovernment (#494)
Browse files Browse the repository at this point in the history
Updating documentation
  • Loading branch information
Chambras authored Oct 28, 2021
1 parent b74db11 commit bfded1b
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -78,8 +78,8 @@ All network traffic is directed through the firewall residing in the Network Hub
|-------------|--------------|-----------------|-----------------|
|default_route| 0.0.0.0/0 |Virtual Appliance|10.0.100.4 |

The default firewall conigured for MLZ is [Azure Firewall Premium](https://docs.microsoft.com/en-us/azure/firewall/premium-features) to allow for enhanced security posturing.
Presently, there are two firewall rules configured to ensure access to the Azure Portal and to facilitate interactive logon via PowerShell and Azure CLI, all other traffic is restricted by default. Below are the collection of rules configured for Azure public cloud:
The default firewall configured for MLZ is [Azure Firewall Premium](https://docs.microsoft.com/en-us/azure/firewall/premium-features) for both Azure Commercial and Azure Government to allow for enhanced security posturing.
Presently, there are two firewall rules configured to ensure access to the Azure Portal and to facilitate interactive logon via PowerShell and Azure CLI, all other traffic is restricted by default. Below are the collection of rules configured for Azure Commercial and Azure Government clouds:

|Rule Collection Priority | Rule Collection Name | Rule name | Source | Port | Protocol |
|-------------------------|----------------------|-----------|--------|----------|----------------------------------------|
Expand Down
2 changes: 1 addition & 1 deletion src/terraform/mlz/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -113,7 +113,7 @@ data "azurerm_client_config" "current_client" {
################################

locals {
firewall_premium_environments = ["public"] # terraform azurerm environments where Azure Firewall Premium is supported
firewall_premium_environments = ["public", "usgovernment"] # terraform azurerm environments where Azure Firewall Premium is supported
}

################################
Expand Down

0 comments on commit bfded1b

Please sign in to comment.