Forced Tunneling: Azure Firewall forced tunneling redirects all internet-bound traffic to an on-premises location for inspection. This feature must be configured when the firewall is initially created. Since Firewall1 is an existing, provisioned firewall, forced tunneling cannot be enabled on it post-deployment.

Azure Firewall Manager: The exhibit provides two clear indicators that Firewall1 is managed by Azure Firewall Manager. First, it explicitly states, "Visit Azure Firewall Manager to configure and manage this firewall." Second, it shows that the firewall is associated with a FirewallPolicy1. Firewalls managed by Azure Firewall Manager use Firewall Policies for centralized rule management, whereas standalone firewalls use Classic Rules.

Microsoft Docs - Azure Firewall forced tunneling: "You can configure forced tunneling during firewall creation to enable it...You can't configure an existing firewall for forced tunneling."

Source: Microsoft Corporation. (2024). Azure Firewall forced tunneling. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/firewall/forced-tunneling.

Microsoft Docs - Azure Firewall Manager overview: "Azure Firewall Policy is a global resource that can be used to centrally manage your firewalls using Azure Firewall Manager."

Source: Microsoft Corporation. (2024). What is Azure Firewall Manager?. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/firewall-manager/overview.