Cloud NGFW Components

The
Cloud NGFW Resource
(or simply NGFW) is associated with your VNet or vWAN hub and can span multiple availability zones. This resource has built-in resiliency, scalability, and life-cycle management.
Rulestacks
define the NGFW traffic filtering behavior such as advanced access control (App-ID, URL Filtering) and threat prevention. A rulestack includes a set of security rules and the associated objects and security profiles. To use a rulestack, you associate it with one or more NGFW resources.