The diagram shows APIM in External Mode and Azure firewall. On the Basics tab, in 'Policy for', select 'Regional WAF. Try VM-Series firewall integration with Azure Sentinel for a unified view of monitoring and alerting on the security posture of your Azure workloads. 4, while Fortinet FortiGate-VM is rated 8.
NSGs allow you to lock down on a virtual network level, whereas Azure Firewall allows you to lock down in a more centralised manner, for traffic bound for or originating from virtual networks across many different subscriptions. Azure firewall pricing You can purchase Sophos XG Firewall as a pre-configured virtual machine (VM) image.