Deploying Azure Bastion and Azure Firewall

Now that you have a better understanding of Azure Firewall and Azure Bastion, you will run through an exercise to do the following via PowerShell:

1. Create a new VNet with a VM.
2. Deploy an Azure firewall.
3. Create a default route within the firewall.
4. Configure an application rule to allow access to www.google.com.
5. Configure a network rule to allow access to external Domain Name System (DNS) servers.
6. Test the firewall rules.

The code can be found here: https://packt.link/I12Yo.

To achieve the preceding objectives, follow these steps:

1. First, connect to the Azure tenant using the following PowerShell command, followed by selecting your subscription (if you have more than one):

   # First connect your Azure account using your credentials
   Connect-AzAccount
   # If necessary, select the right subscription as follows
   $SubscriptionId = "xxxxxxx"
   Select-AzSubscription -SubscriptionId $SubscriptionId 

...