CmdID / az / az network
az network firewall
Manage and configure Azure Firewalls. Azure CLI extensions reference
16 commands 33 options Its page in the Azure CLI extensions reference
Commands
application-ruleManage and configure Azure Firewall application rules.createCreate an Azure Firewall.deleteDelete an Azure Firewall.ip-configManage and configure Azure Firewall IP configurations.learned-ip-prefixRetrieves a list of all IP prefixes that azure firewall has learned to not SNAT.listList Azure Firewalls.list-fqdn-tagsGets all the Azure Firewall FQDN Tags in a subscription.management-ip-configManage and configure Azure Firewall Management IP configurations.nat-ruleManage and configure Azure Firewall NAT rules.network-ruleManage and configure Azure Firewall network rules.packet-capture-operationRuns a packet capture operation on AzureFirewall.policyManage and configure Azure firewall policy.showGet the details of an Azure Firewall.threat-intel-allowlistManage and configure Azure Firewall Threat Intelligence Allow List.updateUpdate an Azure Firewall.waitPlace the CLI in a waiting state until a condition is met.Options
Show its 33 options
--allow-active-ftpAllow Active FTP.--conf-nameName of the IP configuration.--descriptionRule description.--destination-addresses, --dest-addrSpace-separated list of destination IP addresses.--destination-fqdnsSpace-separated list of destination FQDNs.--destination-ip-groupsSpace-separated list of name or resource id of destination IpGroups--destination-portsSpace-separated list of destination ports.--dns-serversSpace-separated list of DNS server IP addresses--enable-dns-proxyEnable DNS Proxy--enable-dnstap-logging, --dnstap-loggingAllow dnstap logging.--enable-fat-flow-logging, --fat-flow-loggingAllow fat flow logging.--enable-udp-log-optimization, --udp-log-optimizationAllow UDP log optimization.--firewall-policy, --policyName or ID of the firewallPolicy associated with this azure firewall.--location, -lLocation.--m-conf-nameName of the management IP configuration.--m-public-ipName or ID of the public IP to use for management IP configuration.--name, -nAzure Firewall name.--private-rangesSpace-separated list of SNAT private range.--public-ip-count, --countNumber of Public IP Address associated with azure firewall.--public-ipName or ID of the public IP to use.--public-ipsSpace-separated list of Public IP addresses associated with azure firewall.--skuSKU of Azure firewall.--source-addressesSpace-separated list of source IP addresses.--source-ip-groupsSpace-separated list of name or resource id of source IpGroups.--tagsspace-separated tags: key[=value] [key[=value] ...].--threat-intel-modeThe operation mode for Threat Intelligence.--tierTier of an azure firewall.--translated-addressTranslated address for this NAT rule.--translated-fqdnTranslated FQDN for this NAT rule.--translated-portTranslated port for this NAT rule.--virtual-hub, --vhubName or ID of the virtualHub to which the firewall belongs.--vnet-nameThe virtual network (VNet) name.--zones, -zSpace-separated list of availability zones into which to provision the resource.