Auto-Learn SNAT routes (public preview): Azure Firewall can now learn address ranges and automatically configure them to be excluded from SNAT, to reduce time and complexity spent manually defining SNAT private ranges. This feature requires Azure Route Server to be deployed in the same Virtual Network in the Azure Firewall.
Learn more.