Configure Application-Level Rules within Azure Firewall

Pluralsight Hands-On Lab — Azure Networking & Security

Configure Application-Level Rules within Azure Firewall

Pluralsight Hands-On Lab — Security

At a Glance

Platform	Pluralsight
Category	Azure Networking & Security
Lab Type	Guided + Challenge Mode
Environment	Azure Portal, Windows VMs via Remote Desktop
Completed	2026

Overview

Azure Firewall provides centralized network security for Azure Virtual Networks, with the ability to control outbound internet access at the application layer using FQDN-based rules. In this lab, I worked in a pre-configured three-subnet architecture — a jump server subnet, a work server subnet, and a firewall subnet — where all outbound traffic from the work server was routed through Azure Firewall and blocked by default. I added an application rule collection to allow the work server to reach www.google.com over HTTP and HTTPS, then verified the change took effect.

What I Did

Connected to the jump VM (Srv-Jump) via Remote Desktop using its public IP address
From the jump VM, connected to the work VM (Srv-Work) using its private IP address, demonstrating the hub-and-spoke access pattern
Attempted to browse to http://www.google.com from the work VM and confirmed access was blocked by the firewall
Navigated to the Azure Firewall resource (Test-FW01) in the portal and opened Rules (classic)
Created an application rule collection named "appcollection" with priority 100 and action Allow
Added a rule targeting www.google.com over HTTP and HTTPS protocols with a wildcard source
Waited for the firewall to finish updating, then returned to the work VM and confirmed www.google.com was now accessible

← Back to Pluralsight Labs