topic Re: Use of Azure service Tags in Cloud NGFW rules in Cloud NGFW for Azure Discussions

Use of Azure service Tags in Cloud NGFW rules

DrewHughes — Fri, 25 Aug 2023 12:22:36 GMT

Hi, can anyone advise if it will be possible to use Azure service tags in the Cloud NGWF rule base?

We currently run a VM and use external dynamic lists for this, but I don't see an option to do that in GUI so far. Note we are not using Panorama at present, so maybe it is possible with that, but would be good to know if we can use service tags without Panorama.

We may be able to programmatically create prefix lists I guess, but if there is anything in the pipeline that would be good to know.

Re: Use of Azure service Tags in Cloud NGFW rules

abudilovskiy — Wed, 06 Sep 2023 12:47:40 GMT

Hi Drew,

Currently, this functionality is not available. It may introduced in future releases. When managing the Cloud NGFW in Panorama, you can learn tags from Azure using the Azure plugin and use these in the security policies. The same applies to EDLs.

Thanks,

Anton

Re: Use of Azure service Tags in Cloud NGFW rules

rolinger — Thu, 14 Dec 2023 20:18:36 GMT

I think having both DSGs (Dynamic Service Groups) and DAAGs (Dynamic Application/App Groups) would add immense value to Azure/AWS policies...tag your cloud services or apps needs, and bind them to the rules when matched.

Re: Use of Azure service Tags in Cloud NGFW rules

MP18 — Fri, 26 Dec 2025 17:16:39 GMT

@DrewHughes Azure Service tags are available now in Cloud NGFW.

Regards

Re: Use of Azure service Tags in Cloud NGFW rules

youngmal — Mon, 02 Feb 2026 22:49:05 GMT

@MP18 Can you clarify - this is available for Azure native managed rulestacks?