無料GitHub で公開

azure-firewall-manager

Expert knowledge for Azure Firewall Manager development including best practices, decision making, security, and configuration. Use when configuring DDoS plans, DNS proxy, FQDN/IP groups, WAF policies, or secured virtual hubs, and other Azure Firewall Manager related development tasks. Not for Azure Firewall (use azure-firewall), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Network Function Manager (use azure-network-function-manager), Azure Web Application Firewall (use azure-web-application-firewall).

MicrosoftDocs/Agent-Skills

インストール方法を見る

含まれるファイル（1）

SKILL.md4.7 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Azure Firewall Manager Skill

This skill provides expert guidance for Azure Firewall Manager. Covers best practices, decision making, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Best Practices	L32-L36	Details on how Azure Firewall evaluates and processes rules, rule collection groups, and policies, including priority, matching logic, and traffic filtering behavior
Decision Making	L37-L41	Guidance on when to use Azure Firewall Manager with a hub virtual network vs a secured virtual hub, including architecture, scenarios, and trade-offs for each option.
Security	L42-L46	Configuring Azure Firewall Manager for security: DDoS Protection plans, centralized WAF policy management, and threat intelligence-based traffic filtering.
Configuration	L47-L58	Configuring Azure Firewall Manager and policies: DDoS plans, DNS/DNS proxy, FQDN/IP group rules, WAF policy management, rule hierarchy, private endpoint protection, and secured virtual hubs.

Best Practices

Topic	URL
Understand Azure Firewall rule processing order and logic	https://learn.microsoft.com/en-us/azure/firewall-manager/rule-processing

Decision Making

Topic	URL
Choose Azure Firewall Manager hub or secured virtual hub	https://learn.microsoft.com/en-us/azure/firewall-manager/vhubs-and-vnets

Security

Topic	URL
Configure threat intelligence-based filtering in Azure Firewall policy	https://learn.microsoft.com/en-us/azure/firewall-manager/threat-intelligence-settings

Configuration

Topic	URL
Configure Azure DDoS Protection plans via Firewall Manager	https://learn.microsoft.com/en-us/azure/firewall-manager/configure-ddos
Configure DNS servers and DNS proxy in Azure Firewall policy	https://learn.microsoft.com/en-us/azure/firewall-manager/dns-settings
Use FQDN filtering in Azure Firewall network rules	https://learn.microsoft.com/en-us/azure/firewall-manager/fqdn-filtering-network-rules
Configure and reuse IP Groups in Azure Firewall policy	https://learn.microsoft.com/en-us/azure/firewall-manager/ip-groups
Manage WAF policies centrally with Azure Firewall Manager	https://learn.microsoft.com/en-us/azure/firewall-manager/manage-web-application-firewall-policies
Migrate Azure Firewall rules to Firewall policy with PowerShell	https://learn.microsoft.com/en-us/azure/firewall-manager/migrate-to-policy
Secure private endpoint traffic in Azure Virtual WAN with Firewall rules	https://learn.microsoft.com/en-us/azure/firewall-manager/private-link-inspection-secure-virtual-hub
Define rule hierarchy and inheritance with Azure Firewall policy	https://learn.microsoft.com/en-us/azure/firewall-manager/rule-hierarchy
Configure secured virtual hubs with Azure Firewall Manager	https://learn.microsoft.com/en-us/azure/firewall-manager/secure-cloud-network

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

ログインしてレビューを書く

同じリポジトリのスキル

概要と使いどころ

azure-active-directory-b2c

無料

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

日本語の概要は準備中です。原文の説明を表示しています。