AZURE FIREWALL

Network rule take precedence over Application rules. so if HTTP/S is allowed in network rules then deny application rules will not take effect at all. need to allow all http/s in application rule and deny particular ones

NAT RULE is port translation inbound