Try our new research platform with insights from 80,000+ expert users

Azure Bastion vs Azure Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Bastion
Ranking in Microsoft Security Suite
19th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
9
Ranking in other categories
Network Monitoring Software (27th), Remote Monitoring and Management (RMM) (7th)
Azure Firewall
Ranking in Microsoft Security Suite
11th
Average Rating
7.4
Reviews Sentiment
8.1
Number of Reviews
36
Ranking in other categories
Firewalls (20th)
 

Mindshare comparison

As of February 2025, in the Microsoft Security Suite category, the mindshare of Azure Bastion is 1.6%, up from 1.5% compared to the previous year. The mindshare of Azure Firewall is 4.7%, up from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Aladin Steiner - PeerSpot reviewer
Has good scalability and provides secure access to the virtual machines
The product improved the security posture of our organization. We don’t have open ports and connect them to servers using it. We can carry out two-factor authentication to protect the devices with conditional access features. It would be nice to have a feature to copy and paste the files into servers. I rate the product a nine out of ten.
Charan Kumar - PeerSpot reviewer
Easy to use and configure but could be more robust
The cost of the solution has increased. The robustness of the software could be better. It should be able to cover host-to-host traffic or HTTP traffic. Configurations can be better. The workloads need to still have free access. The encryption and decryption process is not that seamless. It's a little heavy compared to a FortiGate or other firewalls.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is available in the edit portal."
"The product's setup is easy."
"As an Azure consultant, for me, it is the best way to give the administrator access as you can manage the permission - including who can access Bastion."
"The most significant advantage lies in its runbook features, particularly beneficial for our infrastructure team."
"The ability to operate the product with scripting is excellent."
"It provides all the security to us. Without getting on the internet, we can access our servers. We can access our desktop through our web browser. We don't need to run the mstsc command and login to the VM. All those things are not required."
"The solution's most valuable feature is that it is easy to use...It is modernized, so I can create complex infrastructures."
"The connection to virtual machines is very useful."
"The product's value to my company stems from its ability to secure my organization."
"It is easy for me to protect certain ports or even the IP addresses, as well as do whitelisting, blacklisting, and the FQDN when we want virtual machines connected and to protect certain websites."
"The solution has FQDN integration."
"Network filtering is valuable. The scalability capability from the cloud-native service helps us a lot because it simplifies our day-to-day maintenance activity."
"I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference."
"It provided ease of maintenance. If a new firewall was needed, we only had to run the pipelines for this. So, the maintenance was very easy."
"All its features are good. That's why we recommend it."
"I like that you can deploy the policies separately from the firewall."
 

Cons

"You are charged for retrieving your own data."
"We are not able to copy and paste files directly into the server over the patch host. We have to transfer files over to Azure Storage."
"Speaking of AI, having Microsoft Copilot in Azure Bastion would be good."
"While general support is valuable, having a detailed breakdown of the specific issues would contribute to a more streamlined and efficient resolution process."
"There are some challenges because Bastion is more compatible with Edge but not with the other browsers. As an organization, it doesn't make sense that we have to use only Edge. We should be able to access Bastion over Chrome, Mozilla, or Opera. It should be our choice."
"The solution breaks down sometimes."
"The protocol speed could be faster."
"When you have a boot issue on Windows, you cannot use Azure Bastion to fix it. You have to use the Azure console or the VM console, and it is very limited."
"There is room for further integration of AI into the system."
"There should be better monitoring and logging. Currently, it is put in Sentinel. It should be more seamless and from the interface."
"It is a cloud service, but the lending speed for each region is not always the same. For example, in China, the speed is slow. They need to think about how to make sure that the service pace or speed is always the same in all regions. It would be a great improvement if they can provide the same pace worldwide."
"Right now, with Azure Firewall, we cannot have a normal inbound traffic flow. For inbound, Microsoft suggests using application gateways, so the options are very limited. I cannot use this firewall as an intermediate firewall because of the limitations, and I cannot point routing to another firewall. So if I want to use back-to-back firewall architecture in my environment, I cannot use Azure Firewall for that type of configuration either."
"Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment."
"It has fewer features than you can get from other firewalls, like anti-spam and anti-phishing. Those kinds of things are not included. It only includes IDS and IDB."
"It needs a lot of improvement, especially on intruder detection. They are working hard on that."
"You have to have a defined IP range within your network to associate it with your network. The problem is you have to plan ahead of time if you expect to use the firewall in the future so that you don't have to reconfigure your subnets or that specific IP range. Other than that, I don't any issues. I use it for basic configuration for a single application, so I really don't try to leverage it for multiple applications where I might find some complexity or challenges."
 

Pricing and Cost Advice

"The tool is cheaply priced. I would say that the product is free to use."
"The pricing is a lower decision point than high-quality security for our organization. Better security comes at a cost, but it's worth it, and that's what we tell our customers."
"It does not save money for us."
"Azure Bastion's pricing is good."
"The total cost of ownership is much less than Palo Alto, Cisco, or any other brand."
"Before choosing this solution, we evaluated others, and we found this to be the most cost-effective."
"Azure Firewall is expensive."
"Azure Firewall is more expensive. If Microsoft can make Azure Firewall cheaper, I can see that all clients will think of using it. One client used FortiGate because it is much cheaper. Some clients ask me for Cisco, but in the cloud estimate, I found its cost is the same as Azure Firewall."
"Azure Firewall is quite an expensive product."
"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."
"Azure Firewall comes with Azure native services. We did not buy any kind of license for it. Whether you have a free subscription or a pay-as-you-go model, you can deploy the Azure Firewall service... The amount that you use will determine how much you pay."
"The licensing module is good."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
832,138 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Manufacturing Company
10%
Government
8%
Financial Services Firm
7%
Computer Software Company
16%
Financial Services Firm
10%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Azure Bastion?
Azure Bastion makes it easy to provide quick virtual machine access to our customers.
What is your experience regarding pricing and costs for Azure Bastion?
The tool is cheaply priced. I would say that the product is free to use.
What needs improvement with Azure Bastion?
I think the tool is pretty good. It is like having a tool that just works. If there are better tools that Azure comes up with, then that is a separate thing. In the current scenario, Azure Bastion ...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include int...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the overall cost is reasonable. Azure Firewall offers a solid threat awareness, can...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate VM integrates well and has excellent centralized reporting. It is very easy to...
 

Overview

Find out what your peers are saying about Azure Bastion vs. Azure Firewall and other solutions. Updated: January 2025.
832,138 professionals have used our research since 2012.