I'm currently managing a hybrid cloud setup and facing difficulties with network segmentation and firewall rules across both Azure and our on-prem data center. The challenges stem from different networking patterns in each environment and duplicated firewall rules across various subnets and the Azure firewall. I'm looking for advice on how others are handling this issue. Any suggestions or guidance would be greatly appreciated!
2 Answers
One way to simplify your life is to use IP groups in Azure Firewall. It really streamlines the process, and they recently upped the limit to 600 IP groups per firewall, which is a nice bonus!
Are you using a hub and spoke model or a virtual WAN setup in Azure? Understanding your architecture can help provide more tailored advice.

Sorry for the confusion, but I'm quite new to Azure and to my company. I believe we might be using both options?