---
title: Azure Firewall Policy
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Azure Firewall Policy
---

# Azure Firewall Policy

Azure Firewall Policy is a centralized configuration resource used to define and manage network and application rules for Azure Firewall instances. It lets you standardize security settings across multiple firewalls, including rule collections, threat intelligence settings, and traffic filtering behavior. This helps maintain consistent, scalable, and compliant network security controls in Azure environments.

```
azure.network_firewall_policy
```

## Fields

| Title                  | ID   | Type       | Data Type                                                                                           | Description |
| ---------------------- | ---- | ---------- | --------------------------------------------------------------------------------------------------- | ----------- |
| _key                   | core | string     |
| base_policy            | core | json       | Reference to another subresource.                                                                   |
| child_policies         | core | json       | List of references to Child Firewall Policies.                                                      |
| dns_settings           | core | json       | DNS Proxy Settings in Firewall Policy.                                                              |
| etag                   | core | string     | A unique read-only string that changes whenever the resource is updated.                            |
| explicit_proxy         | core | json       | Explicit Proxy Settings in Firewall Policy.                                                         |
| firewalls              | core | json       | List of references to Azure Firewalls that this Firewall Policy is associated with.                 |
| id                     | core | string     | Resource ID.                                                                                        |
| identity               | core | json       | Identity for the resource.                                                                          |
| insights               | core | json       | Firewall Policy Insights.                                                                           |
| intrusion_detection    | core | json       | Configuration for intrusion detection mode and rules.                                               |
| location               | core | string     | Resource location.                                                                                  |
| name                   | core | string     | Resource name.                                                                                      |
| provisioning_state     | core | string     | The current provisioning state.                                                                     |
| resource_group         | core | string     |
| rule_collection_groups | core | json       | List of references to FirewallPolicyRuleCollectionGroups.                                           |
| size                   | core | string     | A read-only string that represents the size of the FirewallPolicyPropertiesFormat in MB. (ex 0.5MB) |
| sku                    | core | json       | SKU of Firewall policy.                                                                             |
| snat                   | core | json       | The private IP addresses/IP ranges to which traffic will not be SNAT.                               |
| sql                    | core | json       | SQL Settings in Firewall Policy.                                                                    |
| subscription_id        | core | string     |
| subscription_name      | core | string     |
| tags                   | core | hstore_csv |
| threat_intel_mode      | core | string     | The operation mode for Threat Intel.                                                                |
| threat_intel_whitelist | core | json       | ThreatIntel Whitelist for Firewall Policy.                                                          |
| transport_security     | core | json       | Configuration needed to perform TLS termination & initiation.                                       |
| type                   | core | string     | Resource type.                                                                                      |