No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Firewall Manager vs Azure Key Vault comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Firewall Manager
Ranking in Microsoft Security Suite
25th
Average Rating
8.6
Reviews Sentiment
5.4
Number of Reviews
9
Ranking in other categories
Firewall Security Management (10th)
Azure Key Vault
Ranking in Microsoft Security Suite
18th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Enterprise Password Managers (1st), Certificate Management Software (1st), Secrets Management Tools (2nd)
 

Mindshare comparison

As of November 2026, in the Microsoft Security Suite category, the mindshare of Azure Firewall Manager is 1.5%, up from 0.6% compared to the previous year. The mindshare of Azure Key Vault is 2.6%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Mindshare Distribution
ProductMindshare (%)
Azure Key Vault2.6%
Azure Firewall Manager1.5%
Other95.9%
Microsoft Security Suite
 

Featured Reviews

Sikkander  Batcha - PeerSpot reviewer
DevOps Engineer at CloudIQ
Has managed traffic effectively but lacks visibility and advanced control features
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from Azure Firewall, which can be quite costly. There is no login feature in Azure Firewall because only the IAM feature is available in the Azure site; we manage it only through the Azure portal, not through any other portal. Other vendors, such as Palo Alto, provide GUI or CLI interfaces to manage their firewalls, whereas we only manage Azure Firewall through the Azure portal. In the future, I would like to see additional features in Azure Firewall Manager to make it more competitive, such as technologies like App-ID and User-ID that Palo Alto has. Azure Firewall currently only allows traffic based on layer four and sometimes layer seven, so they need to improve in those areas compared to other vendors.
Rajthilak BS - PeerSpot reviewer
Associate Vice President (Data Security & Protection - Confidential AI) at Standard Chartered Bank
Have addressed compliance challenges but still struggle with seamless integration of certificate issuance between environments
In terms of Azure Key Vault improvements, we have to compare the competitor. If we consider AWS, our bank has Microsoft PKI, which is a Microsoft product, for the entire digital certificate infrastructure. Even in the cloud, when it is AWS, the internal certificates are MS PKI. When we had a problem, users had to come to on-premise to get a certificate and import it to AWS Certificate Manager and assign it. We wondered why we could not issue the certificate directly from the cloud for cloud users. There was a simple way in AWS. They have a Private Certificate Authority (PCA) and Amazon Certificate Manager. Private Certificate Authority issues certificates to Amazon services. They also provide Amazon Certificate Manager to store and deploy certificates. These are two neat components - one is an issuer and another is storage and deployment solutions for certificates. With PCA, I can directly enable it and get certificates from AWS itself. AWS can issue SSL/TLS certificates if you enable it directly. If you consider Azure, it is not very clear. Even the naming convention, Key Vault, might not suggest that this is a PKI or certificate manager. You cannot issue certificates directly. They have app certificates and did not have a clear-cut certificate management solution in the cloud when I worked at that time. I am not sure whether they have updated Azure Key Vault as a full-fledged PKI solution now. From what I saw, it was not a full-fledged PKI solution. We are not majorly using Azure Key Vault because it is only for storing secrets. If some solutions can provide guidance on how we can maximize leverage, we can immediately look forward to doing that. We already have some business problems we want to solve. While our primary focus is AWS, many of the services such as ADO are running on Azure, and the secondary services are growing bigger.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has helped us in multiple ways; for example, we don't require different spaces to manage it, we can do a lot of automation integrations into the code, we could integrate it into the DevOps pipeline, and it has helped us with our time-to-market for a very specific product when we are actually deploying or upgrading."
"The solution has improved our organization with its firewall."
"We are utilizing Azure Entra ID for group labeling, so Active Directory, or now it is Entra ID, securing our application for everyone who accesses it, and Azure Firewall Manager is definitely securing our projects and all its features are fine."
"The most valuable feature of Azure Firewall Manager is the testing and configuration."
"The most valuable feature is the web firewall, as it is easy to install and does not require any plugins for your browser."
"From a traffic management perspective, it's a good firewall because it's automatically scalable based on the traffic availability."
"The tool's support is good."
"The solution is very easy to set up."
"The most valuable features of Microsoft Azure Key Vault are the security and convenience of changing passwords in multiple places."
"Overall, I would rate the solution a ten out of ten. It is excellent."
"It is a managed service in Azure, you do not have to worry about security other than the access, and the vaults themselves are inherently secure."
"The platform provides straightforward integration with most of the other Azure services."
"A high level of security."
"Once we got Microsoft Azure Key Vault set up and injected into our code, we have had pretty good success storing our secrets and passwords for our integrations and applications."
"The most valuable aspect of the product is its ability to keep our admin password accounts for keys and a lot of our high-value assets."
"With Azure Key Vault, we can generate our own keys and then import them inside the system, which provides a higher level of security than provider-managed keys."
 

Cons

"We could do only one-way NAT-ing, where the traffic comes from outside to internal, to Azure, which is fine. However, when we actually do NAT-ed traffic to hit the firewall, that way is not working."
"The solution can improve the integration with open-source tools."
"There should be a simple one-click deployment for a firewall, rather than a set of setup instructions that include steps such as the DNS configuration, et cetera."
"Azure charges for many aspects including scaling, automated scaling deployment, and traffic management, which leads to higher costs."
"Microsoft was unable to fully solve the problem with email phishing and spamming."
"The tool's security features need to improve. It needs also to include a monitoring system for logs. It is also complicated to find a query on the Azure firewall."
"The configuration and settings require substantial time for learning, particularly for new users. Improvements in ease of configuration would benefit users significantly."
"With Azure Firewall, the problem is that the NAT-ing still has to be improved."
"It needs to offer dynamic secrets management."
"They should add a key vault feature for the databases temporarily integrated into hybrid clouds."
"Azure needs to provide versions of Key Vault that are suitable for different sizes of companies."
"They should improve its policies, which sometimes reapplied but don't sync properly between the Key vault and the role-based access. When I put some roles on the user side, it sometimes misses the end data to secure."
"The response time can be improved."
"The solution does not allow you to integrate with XML parties if it is not inside Azure itself."
"The integration with Thales HSM is complex and is not out-of-the-box. Uploading the keys was quite a tedious process."
"The slow response from the support team is one of the shortcomings of the solution that needs to be improved."
 

Pricing and Cost Advice

"The solution is certainly expensive in comparison with other cloud services."
"The price of the solution is reasonable but it is reasonable for the features."
"It is less expensive compared to other competitors."
"Azure Key Vault is an affordable solution."
"Pricing is quite reasonable and support is included, although premium support is available for an additional fee."
"The product is neither cheap nor expensive."
"The product is inexpensive."
"Key Vault, like every Azure service, has a cost associated with it, but you don't have to spend thousands of dollars to spin up an environment to build a key management system. It's already there."
"The price of the solution is reasonable for what we are using it for."
"I find the pricing of Azure Key Vault to be reasonable."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
920,574 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
10%
Computer Software Company
9%
Comms Service Provider
9%
Financial Services Firm
8%
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
7%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise28
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Firewall Manager?
The pricing for Azure Firewall Manager is expensive. In our project, we have used both Palo Alto Firewall and Azure Firewall. Azure charges for many aspects including scaling, automated scaling dep...
What needs improvement with Azure Firewall Manager?
Azure Firewall is typically behind other vendor firewalls because we don't see what kind of traffic is traveling through it. That is one drawback. The main drawback is that we need log support from...
What is your primary use case for Azure Firewall Manager?
My customers are using Azure Firewall Manager, so I'm learning from both documentation and practical knowledge. I usually recommend Azure Firewall Manager for projects such as an animal hospital pr...
Which is better - Azure Key Vault or AWS Secrets Manager?
Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...
What needs improvement with Microsoft Azure Key Vault?
Based on my three years of experience, I believe there have been no updates to Azure Key Vault. I think the product needs upgrades in terms of access control and certification improvements. While A...
 

Also Known As

No data available
Microsoft Azure Key Vault, MS Azure Key Vault
 

Overview

 

Sample Customers

Information Not Available
Adobe, DriveTime, Johnson Controls, HP, InterContinental Hotels Group, ASOS
Find out what your peers are saying about Azure Firewall Manager vs. Azure Key Vault and other solutions. Updated: September 2026.
920,574 professionals have used our research since 2012.