Question on Azure Firewall and Bastion

anil kumar 1,641 Reputation points
2021-07-08T07:33:10.04+00:00

Hello,

Could you please help me with following:

  1. How to deallocate firewall using Azure portal like the way a VM can be ?
  2. Do I still pay for Bastion even if concerned VM has been deallocated ?
  3. Are there any fixed charges for Azure firewall? If not, what is per deployment hour in Pricing calculator for firewall.
  4. When I create Azure SQL database, I can see the expected monthly bill for Azure SQL but same is not the case with Azure firewall. Why for some Azure services expected billing is not displayed during creation of those resource/service.
  5. I see Premium firewall is cheaper than Standard - kind of strange. Is it possible to downgrade a Premium firewall to Standard firewall? Will there be any downtime ?

Appreciate your insightful response, thank you !!

Azure SQL Database
Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,197 questions
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
578 questions
Azure Cost Management
Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
2,075 questions
Azure Bastion
Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
243 questions
0 comments
Accepted answer
  1. Andreas Baumgarten 97,566 Reputation points MVP
    2021-07-08T07:39:40.59+00:00

    Hi @anil kumar ,

    regarding 1: This might be helpful: https://www.miru.ch/how-to-stop-start-an-azure-firewall/
    This way it's possible to deallocate an Azure Firewall

    regarding 2: Please take a look here: https://learn.microsoft.com/en-us/answers/questions/256174/how-to-completly-disable-azure-bastion-and-stop-ge.html
    After deployment of Azure Bastion you will be charged. The only option to prevent this is delete the Azure Bastion.

    ----------

    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards
    Andreas Baumgarten

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andreas Baumgarten 97,566 Reputation points MVP
    2021-07-08T09:28:37.717+00:00

    Hi @anil kumar ,

    Are Azure Firewall and Azure bastion just Azure VMs running in the background ?

    Azure Firewall is a PaaS (in my opinion) . Based on the linked solution it's not simply "some VMs".

    If I have configured Bastion for two azure VMs - will I charged twice of configuring bastion for one Azure VM? How exactly is bastion charged - subscription basis, VNet basis or resource basis ?

    Please take a look here: https://azure.microsoft.com/en-us/pricing/details/azure-bastion/

    ----------

    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards
    Andreas Baumgarten