

Highest priority Rule Collection Groups are processed first.

Priority is any number between 100 (highest priority) to 65,000 (lowest priority). Rules are processed based on Rule Collection Group Priority and Rule Collection priority. Rules in a Rule Collection must be of the same type (NAT, Network, or Application). You can define zero or more Rules in a Rule Collection. You can define multiple Rule Collection types within a single Rule Group. Rule Collections are type NAT, Network, or Applications. Rule Collection Groups contain zero or more Rule Collections. With Firewall Policy, rules are organized inside Rule Collections and Rule Collection Groups. It's best to initially space your rule collection priority numbers in 100 increments (100, 200, 300, and so on) so you have room to add more rule collections if needed. The maximum name length is 80 characters. It must begin with a letter or number, and end with a letter, number, or underscore.

A rule collection name can have only letters, numbers, underscores, periods, or hyphens. Rule collections are processed according to the rule type in priority order, lower numbers to higher numbers from 100 to 65,000. Azure Firewall denies all traffic by default, until rules are manually configured to allow traffic. You can configure NAT rules, network rules, and applications rules on Azure Firewall using either classic rules or Firewall Policy.
