We have 2 cisco NGFWv firewalls provisioned in Azure in a sandwich topology. These firewalls and all their resources were automatically provisioned by the purchase process in the azure store.
In a recent security audit, two improvement opportunities related to these NGFWv firewalls were found:
1. For Azure Storage Account of each firewall it is recommended to enable the functionality called "Require secure transfer".
2. The audit recommended disabling public access to the storage account of each firewall.
3. Finally, the audit recommended using Azure private-links to access the storge account of each firewall.
I would like to ask what implications or problems it could have in the operation of the NGFWv if the audit recommendations are applied?
Do you have documentation related to the 3 points mentioned above?
We are concerned that applying the recommendations represents a risk of affecting the correct functioning of the firewalls.
