Security requires inspection of encrypted outbound HTTPS content and intrusion detection and prevention at the network firewall. Which Azure Firewall tier should be evaluated?

1. An NSG only
2. Azure DNS alone
3. Azure Firewall Standard with an assumed identical TLS-inspection feature set
4. Azure Firewall Premium with TLS inspection and IDPS configured