Deploying Azure Firewall to secure the vWAN

Now that we have a vWAN and a hub, we need to secure it by deploying Azure Firewall. In addition to securing the vWAN, Azure Firewall will also be used as the default route for all internet traffic from AVS. It will also be used for traffic inspection.

Prerequisites

The prerequisites for deploying Azure Firewall are:

• A deployed vWAN
• A deployed hub in the vWAN

Deploying Azure Firewall

The steps are as follows:

1. On the Overview page of your deployed virtual WAN, click on the hub that you will be converting into a secure hub:

Figure 7.13 – Selecting the hub to be converted

2. On the virtual hub page, you will see that you have two options to deploy Azure Firewall to the hub. In this example, we will select the Azure Firewall option:

Figure 7.14 – Options to deploy Azure Firewall to the hub

3. After you make your selection...