There is a command group 'az_network_firewall'. This group of commands could 'manage and configure azure firewalls'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_firewall_update'.The syntax is: az network firewall update [--add]
                           [--allow-active-ftp {0, 1, f, false, n, no, t, true, y, yes}]
                           [--count]
                           [--dns-servers]
                           [--enable-dns-proxy {0, 1, f, false, n, no, t, true, y, yes}]
                           [--enable-fat-flow-logging {0, 1, f, false, n, no, t, true, y, yes}]
                           [--enable-udp-log-optimization {0, 1, f, false, n, no, t, true, y, yes}]
                           [--firewall-policy]
                           [--force-string {0, 1, f, false, n, no, t, true, y, yes}]
                           [--ids]
                           [--name]
                           [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                           [--private-ranges]
                           [--public-ips]
                           [--remove]
                           [--resource-group]
                           [--route-server-id]
                           [--set]
                           [--subscription]
                           [--tags]
                           [--threat-intel-mode {alert, deny, off}]
                           [--vhub]
                           [--zones]. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: --add property.listproperty <key=value, string or json string>.. The parameter '--allow-active-ftp' is optional. allow active ftp. by default it is false. it's only allowed for azure firewall on virtual network.. The parameter '--count --public-ip-count' is optional. number of public ip address associated with azure firewall. it's used to add public ip addresses into this firewall.. The parameter '--dns-servers' is optional. space-separated list of dns server ip addresses.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--enable-dns-proxy' is optional. enable dns proxy.. The parameter '--enable-fat-flow-logging --fat-flow-logging' is optional. allow fat flow logging. by default it is false.. The parameter '--enable-udp-log-optimization --udp-log-optimization' is optional. allow udp log optimization. by default it is false.. The parameter '--firewall-policy --policy' is optional. name or id of the firewallpolicy associated with this azure firewall.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--name -n' is optional. azure firewall name.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--private-ranges' is optional. space-separated list of snat privaterange. validate values are single ip, ipprefixes or a single special value "ianaprivateranges".  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--public-ips' is optional. space-separated list of public ip addresses associated with azure firewall. it's used to delete public ip addresses from this firewall.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--remove' is optional. remove a property or an element from a list.  example: --remove property.list <indextoremove> or --remove propertytoremove.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--route-server-id' is optional. the route server id for the firewall.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: --set property1.property2=<value>.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. The parameter '--tags' is optional. resource tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--threat-intel-mode' is optional. the operation mode for threat intelligence.. The parameter '--vhub --virtual-hub' is optional. name or id of the virtualhub to which the firewall belongs.. The parameter '--zones -z' is optional. space-separated list of availability zones into which to provision the resource. allowed values: 1, 2, 3.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 