mcpField
A
azure-firewall-manager

azure-firewall-manager

github.com/microsoftdocsSecurity796178 installsUpdated 3d ago
Repository

About azure-firewall-manager

A guidance skill for agents configuring Azure Firewall Manager, focused on rule processing, architecture choices, security, and policy settings. Its references cover virtual network and secured virtual hub scenarios, with online documentation fetching.

Key features

  1. 01Rule processing order and matching
  2. 02Hub network architecture choices
  3. 03Threat intelligence filtering
  4. 04DDoS and DNS configuration
  5. 05FQDN rules and WAF management
  6. 06Policy hierarchy and private endpoint protection

Use cases

  1. 01Analyze firewall rule matching order
  2. 02Choose a hub network architecture
  3. 03Configure threat intelligence traffic filtering
  4. 04Manage WAF policies centrally

MCP support

Can fetch online documentation with mcp_microsoftdocs:microsoft_docs_fetch, with fetch_webpage as a fallback.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-firewall-manager

After installing, type/azure-firewall-managerin Claude Code to confirm it loaded.

Details

From the project README

Azure Firewall Manager Skill

This skill provides expert guidance for Azure Firewall Manager. Covers best practices, decision making, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Best PracticesL32-L36Details on how Azure Firewall evaluates and processes rules, rule collection groups, and policies, including priority, matching logic, and traffic filtering behavior
Decision MakingL37-L41Guidance on when to use Azure Firewall Manager with a hub virtual network vs a secured virtual hub, including architecture, scenarios, and trade-offs for each option.
SecurityL42-L46Configuring Azure Firewall Manager for security: DDoS Protection plans, centralized WAF policy management, and threat intelligence-based traffic filtering.
ConfigurationL47-L57Configuring Azure Firewall Manager and policies: DDoS plans, DNS/DNS proxy, FQDN/IP group rules, WAF policy management, rule hierarchy, private endpoint protection, and secured virtual hubs.
Best Practices
TopicURL
Understand Azure Firewall rule processing order and logichttps://learn.microsoft.com/en-us/azure/firewall-manager/rule-processing
Decision Making
TopicURL
Choose Azure Firewall Manager hub or secured virtual hubhttps://learn.microsoft.com/en-us/azure/firewall-manager/vhubs-and-vnets
Security
TopicURL
Configure threat intelligence-based filtering in Azure Firewall policyhttps://learn.microsoft.com/en-us/azure/firewall-manager/threat-intelligence-settings
Configuration
TopicURL
Configure Azure DDoS Protection plans via Firewall Managerhttps://learn.microsoft.com/en-us/azure/firewall-manager/configure-ddos
Configure DNS servers and DNS proxy in Azure Firewall policyhttps://learn.microsoft.com/en-us/azure/firewall-manager/dns-settings
Use FQDN filtering in Azure Firewall network ruleshttps://learn.microsoft.com/en-us/azure/firewall-manager/fqdn-filtering-network-rules
Manage WAF policies centrally with Azure Firewall Managerhttps://learn.microsoft.com/en-us/azure/firewall-manager/manage-web-application-firewall-policies
Migrate Azure Firewall rules to Firewall policy with PowerShellhttps://learn.microsoft.com/en-us/azure/firewall-manager/migrate-to-policy
Secure private endpoint traffic in Azure Virtual WAN with Firewall ruleshttps://learn.microsoft.com/en-us/azure/firewall-manager/private-link-inspection-secure-virtual-hub
Define rule hierarchy and inheritance with Azure Firewall policyhttps://learn.microsoft.com/en-us/azure/firewall-manager/rule-hierarchy
Configure secured virtual hubs with Azure Firewall Managerhttps://learn.microsoft.com/en-us/azure/firewall-manager/secure-cloud-network

Comments

Markdown supported