Skip to content

Commit 9cd80e1

Browse files
committed
docs: fix metadata, style edits
1 parent 8b264c3 commit 9cd80e1

1 file changed

Lines changed: 28 additions & 29 deletions

File tree

articles/firewall/ip-groups.md

Lines changed: 28 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,11 @@
11
---
2-
title: IP Groups in Azure Firewall
2+
title: IP Groups in Azure Firewall
33
description: IP groups allow you to group and manage IP addresses for Azure Firewall rules.
4-
services: firewall
54
author: duau
5+
ms.author: duau
66
ms.service: azure-firewall
77
ms.topic: concept-article
8-
ms.date: 02/10/2025
9-
ms.author: duau
8+
ms.date: 03/28/2026
109
ms.custom:
1110
- devx-track-azurepowershell
1211
- sfi-image-nochange
@@ -15,16 +14,16 @@ ms.custom:
1514

1615
# IP Groups in Azure Firewall
1716

18-
IP Groups allow you to group and manage IP addresses for Azure Firewall rules in the following ways:
17+
IP Groups make it easy to group and manage IP addresses for Azure Firewall rules. Use IP Groups in the following ways:
1918

2019
- As a source address in DNAT rules
2120
- As a source or destination address in network rules
2221
- As a source address in application rules
2322

2423

25-
An IP Group can have a single IP address, multiple IP addresses, one or more IP address ranges or addresses and ranges in combination.
24+
An IP Group can include a single IP address, multiple IP addresses, one or more IP address ranges, or a combination of addresses and ranges.
2625

27-
IP Groups can be reused in Azure Firewall DNAT, network, and application rules for multiple firewalls across regions and subscriptions in Azure. Group names must be unique. You can configure an IP Group in the Azure portal, Azure CLI, or REST API. A sample template is provided to help you get started.
26+
You can use IP Groups in Azure Firewall DNAT, network, and application rules for multiple firewalls across regions and subscriptions in Azure. Group names must be unique. You can configure an IP Group in the Azure portal, Azure CLI, or REST API. A sample template is provided to help you get started.
2827

2928
## Sample format
3029

@@ -36,63 +35,63 @@ The following IPv4 address format examples are valid to use in IP Groups:
3635

3736
## Create an IP Group
3837

39-
An IP Group can be created using the Azure portal, Azure CLI, or REST API. For more information, see [Create an IP Group](create-ip-group.md).
38+
Create an IP Group by using the Azure portal, Azure CLI, or REST API. For more information, see [Create an IP Group](create-ip-group.md).
4039

4140
## Browse IP Groups
42-
1. In the Azure portal search bar, type **IP Groups** and select it. You can see the list of the IP Groups, or you can select **Add** to create a new IP Group.
41+
1. In the Azure portal search bar, type `IP Groups` and select it. You can see the list of IP Groups, or you can select **Add** to create a new IP Group.
4342
1. Select an IP Group to open the overview page. You can edit, add, or delete IP addresses or IP Groups.
4443

4544

4645
## Manage an IP Group
4746

48-
You can see all the IP addresses in the IP Group and the rules or resources that are associated with it. To delete an IP Group, you must first dissociate the IP Group from the resource that is using it.
47+
You can see all the IP addresses in the IP Group and the rules or resources that are associated with it. To delete an IP Group, you must first dissociate the IP Group from the resource that uses it.
4948

50-
1. To view or edit the IP addresses, select **IP Addresses** under **Settings** on the left pane.
51-
1. To add a single or multiple IP address(es), select **Add IP Addresses**. This opens the **Drag or Browse** page for an upload, or you can enter the address manually.
52-
1. Selecting the ellipses (****) to the right to edit or delete IP addresses. To edit or delete multiple IP addresses, select the boxes and select **Edit** or **Delete** at the top.
53-
1. Finally, can export the file in the CSV file format.
49+
1. To view or edit the IP addresses, select **IP Addresses** under **Settings** in the left pane.
50+
1. To add single or multiple IP addresses, select **Add IP Addresses**. This action opens the **Drag or Browse** page for an upload, or you can enter the address manually.
51+
1. Select the ellipses (****) to the right to edit or delete IP addresses. To edit or delete multiple IP addresses, select the check boxes and select **Edit** or **Delete** at the top.
52+
1. Finally, you can export the file in the CSV file format.
5453

5554
> [!NOTE]
56-
> If you delete all the IP addresses in an IP Group while it is still in use in a rule, that rule is skipped.
55+
> If you delete all the IP addresses in an IP Group but the IP Group is still in use in a rule, that rule is skipped.
5756
5857

5958
## Use an IP Group
6059

61-
You can now select **IP Group** as a **Source type** or **Destination type** for the IP address(es) when you create Azure Firewall DNAT, application, or network rules.
60+
Select **IP Group** as a **Source type** or **Destination type** for the IP addresses when you create Azure Firewall DNAT, application, or network rules.
6261

6362
## Parallel IP Group updates
6463

65-
You can now update multiple IP Groups in parallel at the same time. This is particularly useful for environments requiring faster changes at scale, especially when making those changes using a dev ops approach (templates, ARM, CLI, and Azure PowerShell).
64+
You can update multiple IP Groups in parallel at the same time. This feature is particularly useful for environments that require faster changes at scale, especially when you make those changes by using a dev ops approach (templates, ARM, CLI, and Azure PowerShell).
6665

67-
With this support, you can perform the following:
66+
By using this feature, you can:
6867

69-
- **Update 20 IP Groups at a time:** Perform simultaneous updates up to 20 IP Groups in one operation, referenced by firewall policy or classic firewall.
70-
- **Update Azure Firewall and IP Groups together:** You can update IP Groups simultaneously with the firewall or with firewall policies.
71-
- **Improved efficiency:** Parallel IP Group updates now run twice as fast.
68+
- **Update 20 IP Groups at a time:** Perform simultaneous updates for up to 20 IP Groups in one operation, referenced by firewall policy or classic firewall.
69+
- **Update Azure Firewall and IP Groups together:** Update IP Groups simultaneously with the firewall or with firewall policies.
70+
- **Improved efficiency:** Parallel IP Group updates now run twice as fast.
7271
- **Receive new and improved error messages:**
7372

7473
|Error message |Description |Recommended action|
7574
|---------|---------|---------|
76-
|**In failed state (skipping update)** |Azure Firewall or Firewall Policy is in a failed state. Updates cannot proceed until the resource is healthy. |Review previous operations and correct any misconfigurations to ensure the resource is healthy.|
75+
|**In failed state (skipping update)** |Azure Firewall or Firewall Policy is in a failed state. Updates can't proceed until the resource is healthy. |Review previous operations and correct any misconfigurations to ensure the resource is healthy.|
7776
| **Backend server could not update Firewall at this time** | The backend server was unable to successfully process the request.| Create a support request.|
7877
| **Error occurred during FW update** | The error is related to the underlying backend servers.| Retry the operation or create a support request if the issue persists.|
79-
| **Internal server error** | An unexpected backend error has occurred. | Retry the operation or create a support request.|
80-
81-
Additionally, note the following status updates:
82-
- **One or more IP Group failure:** If one IP Group update (out of 20 parallel updates) fails, the provisioning state changes to "Failed" while the remaining IP Groups will continue to update and succeed.
83-
- **Status update:** If an IP Group update fails, and if the firewall remains healthy, its state will still show as "Succeeded." To verify, check the status on the IP Group resource itself.
78+
| **Internal server error** | An unexpected backend error occurred. | Retry the operation or create a support request.|
79+
80+
Also, note the following status updates:
81+
- **One or more IP Group failure:** If one IP Group update (out of 20 parallel updates) fails, the provisioning state changes to "Failed" while the remaining IP Groups continue to update and succeed.
82+
- **Status update:** If an IP Group update fails, and if the firewall remains healthy, its state still shows as "Succeeded." To verify, check the status on the IP Group resource itself.
8483

8584
## Region availability
8685

8786
IP Groups are available in all public cloud regions.
8887

8988
## IP address limits
9089

91-
For IP Group limits, see [Azure subscription and service limits, quotas, and constraints](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-firewall-limits)
90+
For IP Group limits, see [Azure subscription and service limits, quotas, and constraints](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-firewall-limits).
9291

9392
## Related Azure PowerShell cmdlets
9493

95-
The following Azure PowerShell cmdlets can be used to create and manage IP Groups:
94+
Use the following Azure PowerShell cmdlets to create and manage IP Groups:
9695

9796
- [New-AzIpGroup](/powershell/module/az.network/new-azipgroup)
9897
- [Remove-AzIPGroup](/powershell/module/az.network/remove-azipgroup)

0 commit comments

Comments
 (0)