federated single-on (SSO) and Active Directory Federation Services (AD FS)

password hash synchronization andsingle sign-on (SSO)

cloud-only user accounts

Pass-through Authentication and single sign-on (SSO)

Configure the Threat intelligence settings for FW1.

Deploy an Azure Application Gateway to VNet1.

Deploy Azure Bastion to VNet1

Configure an inbound rule on FW1.

Create an outgoing security rule for port 443 from the Internet. Associatethe NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the webservers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.