Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →microsoftdocs/azure-firewall
Expert knowledge for Azure Firewall development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment.
Passed 9 of 14 test cases with the skill, and 4 of 14 without it.
and 6 more in the full report
8 fixed6 passed either way7 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our network dual-stack migration requires Azure Firewall to process both IPv4 and IPv6 traffic. What documentation link describes deploying Azure Firewall in dual-stack mode?
| Checked | Without skill | With skill |
|---|---|---|
| Includes the URL https://learn.microsoft.com/en-us/azure/firewall/deploy-dual-stack-firewall | Missed | Passed |
The instructions your model reads when the skill loads.
This skill provides expert guidance for Azure Firewall. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: If
metadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.| Category | Lines | Description |
|---|---|---|
| Troubleshooting | L37-L42 | Diagnosing Azure Firewall issues using known limitations, packet captures, and Sentinel log analysis for malware detection and traffic investigation. |
| Best Practices | L43-L48 | Best practices for Azure Firewall DNS proxy/caching, rule and SNAT tuning, using Policy Analytics to refine rules, and hardening firewall security and configuration |
| Decision Making | L49-L56 | Guidance on selecting the right Azure Firewall SKU (Basic/Standard/Premium) using features, performance benchmarks, and deployment steps for Basic with portal and policy. |
| Architecture & Design Patterns | L57-L67 | Design patterns for Azure Firewall deployment: hub-spoke routing, forced tunneling, SLB integration, management NIC use, AVD/M365 protection, and DNAT for overlapping private networks. |
| Limits & Quotas | L68-L76 | Configuring Azure Firewall capacity, SNAT port scaling (with multiple public IPs and NAT Gateway/V2), and tuning limits like prescaling ranges and TCP session idle timeouts. |
| Security | L77-L90 | Configuring Azure Firewall for secure deployments: policies, roles/access, TLS inspection and CA certs, threat intelligence, DNAT, hybrid/AKS protection, and best-practice security hardening. |
| Configuration | L91-L112 | Configuring Azure Firewall behavior: rules, IP groups, DNS, HTTP headers, SNAT/DNAT, IPv6, FTP/SQL, maintenance windows, logging/monitoring, and advanced Premium features. |
| Integrations & Coding Patterns | L113-L117 | Configuring Azure Firewall to securely access Azure Storage via SFTP, including required rules, network paths, and integration patterns for SFTP traffic. |
| Deployment | L118-L126 | Guides for deploying Azure Firewall (Standard/Premium) with Bicep, ARM, Terraform, changing SKUs, and integrating with IP Groups and Azure DDoS Protection. |
| Topic | URL |
|---|---|
| Detect and investigate malware using Sentinel with Azure Firewall logs | https://learn.microsoft.com/en-us/azure/firewall/detect-malware-with-sentinel |
| Troubleshoot Azure Firewall using packet capture | https://learn.microsoft.com/en-us/azure/firewall/packet-capture |
| Topic | URL |
|---|---|
| Understand Azure Firewall DNS proxy behavior and caching | https://learn.microsoft.com/en-us/azure/firewall/dns-details |
| Optimize Azure Firewall performance with rule and SNAT tuning | https://learn.microsoft.com/en-us/azure/firewall/firewall-best-practices |
test cases passed, vs 4 / 14 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.