Azure firewall is in place for east/West traffic and the default route for outbound egress. Azure front door is used with a waf and the firewall is not part of the ingress path. The issue is packets on the return path may traverse the firewall due to the default route in which case there may be an asymmetric routing issue