V20260930

Firewall policy pages

• Every firewall policy attached to an Azure Firewall now gets its own page.
• Rules are listed in the order Azure Firewall evaluates them: DNAT, then network, then application rules.
• Rules inherited from a parent policy are shown on the child policy's page, ahead of its own rules.
• The page header shows tier, threat intelligence mode, DNS settings, IDPS and TLS inspection. Application rules show whether TLS inspection is on.
• Long address, FQDN and port lists are shortened with a (+N more) hint; hover to see the full list.
• -SkipFirewallRules skips reading firewall policy rules and omits the policy pages.

VNet pages

• Azure Firewall, Application Gateway, VNet gateways and Bastion are now drawn inside the subnet they are deployed in, instead of the connectivity lane.
• Azure Firewall shapes show more detail: policy, availability zones, state, management subnet, and all public IPs.
• Firewalls in a secured Virtual WAN hub are drawn next to their hub.

Fixes

• A firewall's IP configuration no longer appears as a separate shape without an icon in AzureFirewallSubnet.
• Resources detected only from a subnet reference now have an icon.

Full Changelog: V20260929...V20260930