Destination Network Address Translation (DNAT) can now be used on the private IP address of Azure Firewall. This makes it possible to direct incoming traffic to private resources in a network.