Azure Firewall threat intelligence alerts

[zgrissi]

Hello
I need to catch the alerts about traffic from/to malicious IP addresses and domains into the Azure Security Center.
Is it possible to get those alerts if I activate the Azure Firewall threat intelligence ?
Do I need to activate Azure Defender solution ? If yes, is the free edition is enough ?
Thanks for your help !

[tarosler]

Hi @zgrissi,
Azure Defender for DNS scanning continuesly all DNS queries from your Azure resources connected to the Azure DNS, and alerts you when one of your resources queried malicious domain. You can read more here: https://docs.microsoft.com/en-us/azure/security-center/defender-for-dns-introduction

Regarding Azure Firewall - integration between the products still not supported, but this is something we are exploring.

Best,
Tal Rosler
Product Manager, Azure Defender