diff --git a/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/Azure Policy - Enforce Explicit Proxy Configuration for Firewall Policies.txt b/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/Azure Policy - Enforce Explicit Proxy Configuration for Firewall Policies.txt new file mode 100644 index 0000000..27c02a2 --- /dev/null +++ b/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/Azure Policy - Enforce Explicit Proxy Configuration for Firewall Policies.txt @@ -0,0 +1,34 @@ +{ + "mode": "All", + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/firewallPolicies" + }, + { + "field": "Microsoft.Network/firewallPolicies/explicitProxy.enableExplicitProxy", + "exists": "false" + } + ] + }, + "then": { + "effect": "[parameters('effect')]" + } + }, + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "Audit", + "Disabled" + ], + "defaultValue": "Audit" + } + } +} \ No newline at end of file diff --git a/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/README.txt b/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/README.txt new file mode 100644 index 0000000..aede4e9 --- /dev/null +++ b/Azure Firewall/Policy - Azure Policy Definitions/Policy - Enforce Explicit Proxy Configuration for Firewall Policies/README.txt @@ -0,0 +1,11 @@ +Azure Policy - Enforce Explicit Proxy Configuration for Firewall Policies +This Azure Policy checks all deployed Firewall Policies (Microsoft.Network/firewallPolicies) to ensure the explicitProxy.enableExplicitProxy field is present. If it is missing, the policy flags or audits the resource based on the chosen effect. + +How the Policy Works +Scope: Applies to all resources in scope with type Microsoft.Network/firewallPolicies. +Condition: Checks if explicitProxy.enableExplicitProxy does not exist ("exists": "false"). +Action: Depending on the policy parameter effect, Azure Policy will either audit the non-compliant resource or disable the check. +Usage Instructions +Create/Assign the Policy: In the Azure Portal or via Azure CLI, upload this policy definition and assign it to a scope (management group, subscription, or resource group). +Choose the Effect: While assigning or editing the policy, select the desired effect (Audit or Disabled). +Review Compliance: In the Azure Policy blade, review which Firewall Policies do not meet the requirement if you have set the effect to Audit. \ No newline at end of file