COMPUTER NETWORKING

Detailed explanation-1: -A firewall policy is a filter that allows or denies traffic based on a matching tuple: source address, destination address, and service. By default, firewall policy rules are stateful: if client-to-server traffic is allowed, the session is maintained in a state table, and the response traffic is allowed.

Detailed explanation-2: -Azure Firewall denies all traffic by default, until rules are manually configured to allow traffic.

Detailed explanation-3: -Currently, Azure Firewall policy support two kinds of rule collections which are Filter collection and NAT collection. There are three kinds of rules which are application rule, network rule and nat rule.

Detailed explanation-4: -Default = discard: That which is not expressly permitted is prohibited. Default = forward: That which is not expressly prohibited is permitted. The default discard policy is more conservative. Initially, everything is blocked, and services must be added on a case-by-case basis.