Threat intelligence-based filtering for Azure Firewall is now available in preview. The addition of the Threat Intelligence feed to the filtering capabilities expands both the options to alert and deny traffic from/to known malicious IP addresses and domains based on near real-time data sourced from the Microsoft Threat Intelligence feed powered by the Intelligent Security Graph and used by multiple services across Azure and Microsoft.
Support for Service Tags, which has also been a highly requested feature, is also now available. A service tag represents a group of IP address prefixes for specific Microsoft services such as SQL Azure, Azure Key Vault, and Azure Service Bus, to simplify network rule creation
For more information, visit: