You plan to deploy Azure Firewall Premium, enable all Premium features, and configure both network and application rules. Which rule type does the firewall evaluate first?

Azure Firewall processes rules in a specific order. Threat intelligence-based filtering is evaluated first. This feature allows the firewall to block traffic to and from known malicious IP addresses and domains, providing an immediate layer of protection. If traffic is allowed by threat intelligence, the firewall then proceeds to evaluate network rules, followed by application rules. Network rules control traffic based on IP addresses, ports, and protocols, while application rules control traffic based on fully qualified domain names (FQDNs) and HTTP/S headers. Infrastructure rules are not a standard rule type configured by the user in Azure Firewall.