Configure network security with Azure Firewall

In this section, we will learn why it’s a good idea to protect an AVD environment with the use of an Azure firewall or any other network virtual appliance, such as Checkpoint or Fortinet.

Typically, in a hub-spoke network topology, the firewall or NVA is located in the hub network. With the help of a User Defined Route (UDR), all the traffic from the AVD virtual network will be redirected to the firewall.

The first resource that the IT admin needs to create is the Azure firewall. This can be done using the Azure portal or with infrastructure as code. In this example, the firewall is deployed using PowerShell.

Before we begin, we need to make sure there are a few resources already deployed, such as the following:

• A resource group
• A hub virtual network
• AzureFirewallSubnet with a /26 subnet size
• AzureFirewallManagementSubnet with a /26 subnet size

The following figure shows a virtual network with...