Implementing central management with Firewall Manager

In this chapter, we covered the application of network security configurations to safeguard the network perimeter. To protect virtual networks or public IP addresses from DDoS attacks, we can employ DDoS protection plans, deploy Azure Firewall in a virtual network or virtual WAN hub, and use Azure WAF policies on Application Gateway or Front Door instances. However, managing these security capabilities independently becomes ineffective when dealing with multiple Azure subscriptions and services spread across several regions.

This is where Azure Firewall Manager can help us. Firewall Manager provides centralized network security management across subscriptions and across regions. We can manage configuration and policies for Azure Firewall, Azure Application Gateway WAFs, Front Door WAFs, and DDoS protection plans from one place and deploy to networks and instances across subscriptions or regions. This significantly reduces the...