Merge pull request #53943 from staleycyn/patch-3

Enhance Azure Firewall unit with SKU details

Author: JamesJBarnett

learn-pr/wwl-azure/design-implement-network-security-monitoring/includes/6-azure-firewall.md

@@ -6,14 +6,23 @@
 
 ## When to use Azure Firewall 
 
-Azure Firewall has three [SKUs](/azure/firewall/choose-firewall-sku): Azure Firewall Basic, Azure Firewall Standard, and Azure Firewall Premium. All versions can help you in these scenarios. 
+Azure Firewall has three [SKUs](/azure/firewall/choose-firewall-sku): Azure Firewall Basic, Azure Firewall Standard, and Azure Firewall Premium. 
 
 - You want to protect your network against infiltration.
 - You want to protect your network against user error.
 - Your business includes e-commerce or credit card payments.
 - You want to configure spoke-to-spoke connectivity.
 - You want to monitor incoming and outgoing traffic.
 
+### How to choose the SKU
+
+- **Basic**: Up to 250 Mbps; SMB environments; has threat intelligence in alert mode only.
+- **Standard**: Up to 30 Gbps; enterprise environments; L3–L7 filtering, DNS proxy, web categories, and threat intelligence.
+- **Premium**: Up to 100 Gbps; regulated/sensitive environments (healthcare, payment); adds TLS inspection, IDPS, full URL filtering, and PCI DSS compliance.
+
+
+
+
 ## What are Azure Firewall rules?
 
  An Azure Firewall denies all traffic by default, until rules are manually configured to allow traffic. Rules are organized inside Rule Collections which are contained in Rule Collection Groups. In the Azure Firewall, you can configure NAT rules, network rules, and applications rules.
@@ -28,4 +37,4 @@ Azure Firewall applies rules in priority order. Rules based on threat intelligen
 
 
 > [!TIP]
-> Learn more about Azure Firewall in the [Introduction to Azure Firewall](/training/modules/introduction-azure-firewall/) module.
+> Learn more about Azure Firewall in the [Introduction to Azure Firewall](/training/modules/introduction-azure-firewall/) module.

learn-pr/wwl-azure/design-implement-network-security-monitoring/index.yml

@@ -5,7 +5,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Design and Implement Network Security
   description: "You learn to design and implement network security solutions such as Azure DDoS, Azure Firewall, Network Security Groups, and Web Application Firewall."
-  ms.date: 11/19/2025
+  ms.date: 03/23/2026
   author: wwlpublish
   ms.author: cynthist
   ms.topic: module