---
title: Azure Firewall
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Azure Firewall
---

# Azure Firewall

Azure Firewall is a cloud‑native network security service that protects Azure virtual networks with stateful traffic inspection and threat intelligence filtering. It provides centralized policy enforcement, application and network rules, and high availability by default. The service scales automatically and integrates with Azure Monitor for logging and analytics.

```
azure.network_azure_firewall
```

## Fields

| Title                        | ID   | Type          | Data Type                                                                    | Description |
| ---------------------------- | ---- | ------------- | ---------------------------------------------------------------------------- | ----------- |
| _key                         | core | string        |
| application_rule_collections | core | json          | Collection of application rule collections used by Azure Firewall.           |
| etag                         | core | string        | A unique read-only string that changes whenever the resource is updated.     |
| firewall_policy              | core | json          | Reference to another subresource.                                            |
| hub_ip_addresses             | core | json          | IP addresses associated with azure firewall.                                 |
| id                           | core | string        | Resource ID.                                                                 |
| ip_configurations            | core | json          | IP configuration of the Azure Firewall resource.                             |
| ip_groups                    | core | json          | List of IpGroups associated with azure firewall.                             |
| location                     | core | string        | Resource location.                                                           |
| management_ip_configuration  | core | json          | IP configuration of an Azure Firewall.                                       |
| name                         | core | string        | Resource name.                                                               |
| nat_rule_collections         | core | json          | Collection of NAT rule collections used by Azure Firewall.                   |
| network_rule_collections     | core | json          | Collection of network rule collections used by Azure Firewall.               |
| provisioning_state           | core | string        | The current provisioning state.                                              |
| resource_group               | core | string        |
| sku                          | core | json          | SKU of an Azure Firewall.                                                    |
| subscription_id              | core | string        |
| subscription_name            | core | string        |
| tags                         | core | hstore_csv    |
| threat_intel_mode            | core | string        | The operation mode for Threat Intel.                                         |
| type                         | core | string        | Resource type.                                                               |
| virtual_hub                  | core | json          | Reference to another subresource.                                            |
| zones                        | core | array<string> | A list of availability zones denoting where the resource needs to come from. |