services / Azure / Firewall Policy

An Azure Firewall Policy is the centralized configuration of network/application rule collections, NAT rules, threat intelligence, and TLS-inspection settings governing traffic for one or more Azure Firewalls.

The policy is the enforced network access-control and defense ruleset protecting a network function; its configuration and associated certificate material are security-sensitive.

Microsoft.​Network/​firewallPolicies/​certificates/​action

Generates the intermediate CA/TLS-inspection certificate material the firewall trusts, exposing cryptographic material usable to intercept and decrypt inspected TLS traffic.

Risks

1. Cryptographic exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links