Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -126,6 +126,9 @@
},
"Get Azure Firewall With Zones": {
"$ref": "./examples/AzureFirewallGetWithZones.json"
},
"Get Azure Firewall With Additional Properties": {
"$ref": "./examples/AzureFirewallGetWithAdditionalProperties.json"
}
}
},
Expand Down Expand Up @@ -189,6 +192,9 @@
},
"Create Azure Firewall in virtual Hub": {
"$ref": "./examples/AzureFirewallPutInHub.json"
},
"Create Azure Firewall With Additional Properties": {
"$ref": "./examples/AzureFirewallPutWithAdditionalProperties.json"
}
},
"x-ms-long-running-operation": true,
Expand Down Expand Up @@ -450,6 +456,10 @@
"sku": {
"description": "The Azure Firewall Resource SKU.",
"$ref": "#/definitions/AzureFirewallSku"
},
"additionalProperties": {
"$ref": "#/definitions/AzureFirewallAdditionalProperties",
"description": "The additional properties used to further config this azure firewall "
}
},
"description": "Properties of the Azure Firewall."
Expand Down Expand Up @@ -510,6 +520,13 @@
"modelAsString": true
}
},
"AzureFirewallAdditionalProperties": {
"type": "object",
"additionalProperties": {
"type": "string"
},
"description": "The additional properties of azure firewall"
},
"AzureFirewallApplicationRuleCollectionPropertiesFormat": {
"properties": {
"priority": {
Expand Down Expand Up @@ -874,9 +891,9 @@
"destinationIpGroups": {
"type": "array",
"description": "List of destination IpGroups for this rule.",
"items": {
"items": {
"type": "string"
}
}
}
},
"description": "Properties of the network rule."
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -167,7 +167,8 @@
]
}
}
]
],
"additionalProperties": {}
}
}
}
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,179 @@
{
"parameters": {
"api-version": "2019-09-01",
"subscriptionId": "subid",
"resourceGroupName": "rg1",
"azureFirewallName": "azurefirewall"
},
"responses": {
"200": {
"body": {
"name": "azurefirewall",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/azureFirewalls/azurefirewall",
"type": "Microsoft.Network/azureFirewalls",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"location": "West US",
"zones": [],
"tags": {
"key1": "value1"
},
"properties": {
"provisioningState": "Succeeded",
"sku": {
"name": "AZFW_VNet",
"tier": "Standard"
},
"threatIntelMode": "Alert",
"ipConfigurations": [
{
"name": "azureFirewallIpConfiguration",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/azureFirewalls/azurefirewallgw/ipConfigurations/azureFirewallIpConfiguration",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"properties": {
"provisioningState": "Succeeded",
"privateIPAddress": "10.0.0.0",
"subnet": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/vnet2/subnets/AzureFirewallSubnet"
},
"publicIPAddress": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/publicIPAddresses/pipName"
}
}
}
],
"applicationRuleCollections": [
{
"name": "apprulecoll",
"properties": {
"priority": 110,
"action": {
"type": "Deny"
},
"rules": [
{
"name": "rule1",
"description": "Deny inbound rule",
"protocols": [
{
"protocolType": "Https",
"port": 443
}
],
"targetFqdns": [
"www.test.com"
],
"sourceAddresses": [
"216.58.216.164",
"10.0.0.0/24"
]
}
]
}
}
],
"natRuleCollections": [
{
"name": "natrulecoll",
"properties": {
"priority": 112,
"action": {
"type": "Dnat"
},
"rules": [
{
"name": "DNAT-HTTPS-traffic",
"description": "D-NAT all outbound web traffic for inspection",
"sourceAddresses": [
"*"
],
"destinationAddresses": [
"1.2.3.4"
],
"destinationPorts": [
"443"
],
"protocols": [
"TCP"
],
"translatedAddress": "1.2.3.5",
"translatedPort": "8443"
},
{
"name": "DNAT-HTTP-traffic-With-FQDN",
"description": "D-NAT all inbound web traffic for inspection",
"sourceAddresses": [
"*"
],
"destinationAddresses": [
"1.2.3.4"
],
"destinationPorts": [
"80"
],
"protocols": [
"TCP"
],
"translatedFqdn": "internalhttpserver",
"translatedPort": "880"
}
]
}
}
],
"networkRuleCollections": [
{
"name": "netrulecoll",
"properties": {
"priority": 112,
"action": {
"type": "Deny"
},
"rules": [
{
"name": "L4-traffic",
"description": "Block traffic based on source IPs and ports",
"sourceAddresses": [
"192.168.1.1-192.168.1.12",
"10.1.4.12-10.1.4.255"
],
"destinationPorts": [
"443-444",
"8443"
],
"destinationAddresses": [
"*"
],
"protocols": [
"TCP"
]
},
{
"name": "L4-traffic-with-FQDN",
"description": "Block traffic based on source IPs and ports to amazon",
"sourceAddresses": [
"10.2.4.12-10.2.4.255"
],
"destinationPorts": [
"443-444",
"8443"
],
"destinationFqdns": [
"www.amazon.com"
],
"protocols": [
"TCP"
]
}
]
}
}
],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
}
}
}
}
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,8 @@
]
}
}
]
],
"additionalProperties": {}
}
}
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -164,7 +164,11 @@
]
}
}
]
],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
}
}
}
]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -163,7 +163,11 @@
]
}
}
]
],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
}
}
}
]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -321,7 +321,8 @@
]
}
}
]
],
"additionalProperties": {}
}
}
},
Expand Down Expand Up @@ -486,7 +487,8 @@
]
}
}
]
],
"additionalProperties": {}
}
}
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,8 @@
}
],
"privateIPAddress": "10.0.0.0"
}
},
"additionalProperties": {}
}
}
},
Expand Down Expand Up @@ -92,7 +93,8 @@
}
],
"privateIPAddress": "10.0.0.0"
}
},
"additionalProperties": {}
}
}
}
Expand Down
Loading