Use of Azure service Tags in Cloud NGFW rules

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Use of Azure service Tags in Cloud NGFW rules

L0 Member

Hi, can anyone advise if it will be possible to use Azure service tags in the Cloud NGWF rule base?

We currently run a VM and use external dynamic lists for this, but I don't see an option to do that in GUI so far.  Note we are not using Panorama at present, so maybe it is possible with that, but would be good to know if we can use service tags without Panorama.

We may be able to programmatically create prefix lists I guess, but if there is anything in the pipeline that would be good to know.


L4 Transporter

Hi Drew,


Currently, this functionality is not available. It may introduced in future releases. When managing the Cloud NGFW in Panorama, you can learn tags from Azure using the Azure plugin and use these in the security policies. The same applies to EDLs.




L1 Bithead

I think having both DSGs (Dynamic Service Groups) and DAAGs (Dynamic Application/App Groups) would add immense value to Azure/AWS policies...tag your cloud services or apps needs, and bind them to the rules when matched.

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!