Cloud NGFW for Azure Deployment Architectures

[rpegada]

[rswarnkar]

Hey, would be good if you could export these images as PDF. Thanks 

[srpmattey]

On the ingress internet flow, how do you control which IPs on the internet are allowed to reach the application? In traditional firewalling, based on the order of operations, the security policy is evaluated first, meaning I would create a whitelist of who can access my application, and then the NAT is evaluated. With the next-generation firewall, there doesn’t seem to be a way to perform that filtering directly on the firewall. Is that correct?