Use of Azure service Tags in Cloud NGFW rules

[DrewHughes]

Hi, can anyone advise if it will be possible to use Azure service tags in the Cloud NGWF rule base?

We currently run a VM and use external dynamic lists for this, but I don't see an option to do that in GUI so far.  Note we are not using Panorama at present, so maybe it is possible with that, but would be good to know if we can use service tags without Panorama.

We may be able to programmatically create prefix lists I guess, but if there is anything in the pipeline that would be good to know.

[abudilovskiy]

Hi Drew,

Currently, this functionality is not available. It may introduced in future releases. When managing the Cloud NGFW in Panorama, you can learn tags from Azure using the Azure plugin and use these in the security policies. The same applies to EDLs.

Thanks,

Anton

[rolinger]

I think having both DSGs (Dynamic Service Groups) and DAAGs (Dynamic Application/App Groups) would add immense value to Azure/AWS policies...tag your cloud services or apps needs, and bind them to the rules when matched.