The Azure Firewall
integration in Security Copilot helps analysts perform detailed
investigations of the malicious traffic intercepted by the IDPS feature of their
firewalls across their entire fleet using natural language questions. In an announcement
earlier this year, these capabilities were launched on the Security Copilot portal and
now are being integrated even more closely with Azure Firewall. The following
capabilities can now be queried via the Azure Copilot experience directly on the Azure
portal where customers regularly interact with their Azure Firewalls:
Retrieve the top IDPS signature hits for an
Azure Firewall
Enrich the threat profile of an IDPS
signature beyond log information
Look for a given IDPS signature across your
tenant, subscription, or resource group
Generate recommendations to secure your
environment using Azure Firewall's IDPS feature
To
learn more about the user journey and value that Copilot can deliver, see the Azure blog. To see
these capabilities in action, take a look at this Tech Community blog,
and to get started, see the documentation.