diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewall.json b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewall.json
index a1064844d668..5b144208e84d 100644
--- a/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewall.json
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewall.json
@@ -469,6 +469,13 @@
                "items":{  
                   "type":"string"
                }
+            },
+            "fqdnTags":{
+               "type":"array",
+               "description":"List of FQDN Tags for this rule.",
+               "items":{  
+                  "type":"string"
+               }
             }
          },
          "description":"Properties of an application rule."
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewallFqdnTag.json b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewallFqdnTag.json
new file mode 100644
index 000000000000..0f4f901c8de2
--- /dev/null
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/azureFirewallFqdnTag.json
@@ -0,0 +1,139 @@
+{
+   "swagger": "2.0",
+   "info": {
+      "title": "NetworkManagementClient",
+      "description": "The Microsoft Azure Network management API provides a RESTful set of web services that interact with Microsoft Azure Networks service to manage your network resources. The API has entities that capture the relationship between an end user and the Microsoft Azure Networks service.",
+      "version": "2018-08-01"
+   },
+   "host": "management.azure.com",
+   "schemes": [
+      "https"
+   ],
+   "consumes": [
+      "application/json"
+   ],
+   "produces": [
+      "application/json"
+   ],
+   "security": [
+      {
+         "azure_auth": [
+            "user_impersonation"
+         ]
+      }
+   ],
+   "securityDefinitions": {
+      "azure_auth": {
+         "type": "oauth2",
+         "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
+         "flow": "implicit",
+         "description": "Azure Active Directory OAuth2 Flow",
+         "scopes": {
+            "user_impersonation": "impersonate your user account"
+         }
+      }
+   },
+   "paths": {
+      "/subscriptions/{subscriptionId}/providers/Microsoft.Network/azureFirewallFqdnTags": {
+         "get": {
+            "tags": [
+               "AzureFirewallFqdnTags"
+            ],
+            "operationId": "AzureFirewallFqdnTags_ListAll",
+            "description":"Gets all the Azure Firewall FQDN Tags in a subscription.",
+            "parameters":[  
+               {
+                  "$ref":"#/parameters/ApiVersionParameter"
+               },
+               {
+                  "$ref":"#/parameters/SubscriptionIdParameter"
+               }
+            ],
+            "responses":{  
+               "200":{  
+                  "description":"Success. The operation returns a list of Azure Firewall FQDN Tag resources.",
+                  "schema":{  
+                     "$ref":"#/definitions/AzureFirewallFqdnTagListResult"
+                  }
+               }
+            },
+            "x-ms-examples":{  
+               "List all Azure Firewall FQDN Tags for a given subscription":{  
+                  "$ref":"./examples/AzureFirewallFqdnTagsListBySubscription.json"
+               }
+            },
+            "x-ms-pageable":{  
+               "nextLinkName":"nextLink"
+            }
+         }
+      }
+   },
+   "definitions": {
+      "AzureFirewallFqdnTagPropertiesFormat": {
+         "properties": {
+            "provisioningState": {
+               "type": "string",
+               "readOnly": true,
+               "description": "The provisioning state of the resource."
+            },
+            "fqdnTagName": {
+               "type": "string",
+               "readOnly": true,
+               "description": "The name of this FQDN Tag."
+            }
+         },
+         "description": "Azure Firewall FQDN Tag Properties"
+      },
+      "AzureFirewallFqdnTag": {
+         "properties": {
+            "properties": {
+               "x-ms-client-flatten": true,
+               "$ref": "#/definitions/AzureFirewallFqdnTagPropertiesFormat"
+            },
+            "etag": {
+               "type": "string",
+               "readOnly": true,
+               "description": "Gets a unique read-only string that changes whenever the resource is updated."
+            }
+         },
+         "allOf": [
+            {
+               "$ref": "./network.json#/definitions/Resource"
+            }
+         ],
+         "description": "Azure Firewall FQDN Tag Resource"
+      },
+      "AzureFirewallFqdnTagListResult":{  
+         "properties":{  
+            "value":{  
+               "type":"array",
+               "items":{  
+                  "$ref":"#/definitions/AzureFirewallFqdnTag"
+               },
+               "description":"List of Azure Firewall FQDN Tags in a resource group."
+            },
+            "nextLink":{  
+               "type":"string",
+               "description":"URL to get the next set of results."
+            }
+         },
+         "description":"Response for ListAzureFirewallFqdnTags API service call."
+      }
+   },
+   "parameters": {
+      "SubscriptionIdParameter": {
+         "name": "subscriptionId",
+         "in": "path",
+         "required": true,
+         "type": "string",
+         "description": "The subscription credentials which uniquely identify the Microsoft Azure subscription. The subscription ID forms part of the URI for every service call."
+      },
+      "ApiVersionParameter": {
+         "name": "api-version",
+         "in": "query",
+         "required": true,
+         "type": "string",
+         "description": "Client API version."
+      }
+   }
+}
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/examples/AzureFirewallFqdnTagsListBySubscription.json b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/examples/AzureFirewallFqdnTagsListBySubscription.json
new file mode 100644
index 000000000000..f9b6f0a76f5d
--- /dev/null
+++ b/specification/network/resource-manager/Microsoft.Network/stable/2018-08-01/examples/AzureFirewallFqdnTagsListBySubscription.json
@@ -0,0 +1,28 @@
+{  
+   "parameters":{  
+      "api-version":"2018-07-01",
+      "subscriptionId":"subid"
+   },
+   "responses":{  
+      "200":{  
+         "body":{  
+            "value":[  
+               {  
+                  "name":"azfwfqdntag",
+                  "id":"/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/azureFirewallFqdnTags/azfwfqdntag",
+                  "type":"Microsoft.Network/azureFirewallFqdnTags",
+                  "etag":"w/\\00000000-0000-0000-0000-000000000000\\",
+                  "location":"West US",
+                  "tags":{  
+                     "key1":"value1"
+                  },
+                  "properties":{  
+                     "provisioningState":"Succeeded",
+                     "fqdnTagName":"azfwfqdntag"
+                  }
+               }
+            ]
+         }
+      }
+   }
+}
diff --git a/specification/network/resource-manager/readme.md b/specification/network/resource-manager/readme.md
index 49f76d74665f..33f5f9136f6b 100644
--- a/specification/network/resource-manager/readme.md
+++ b/specification/network/resource-manager/readme.md
@@ -41,6 +41,7 @@ input-file:
   - Microsoft.Network/stable/2018-08-01/applicationGateway.json
   - Microsoft.Network/stable/2018-08-01/applicationSecurityGroup.json
   - Microsoft.Network/stable/2018-08-01/azureFirewall.json
+  - Microsoft.Network/stable/2018-08-01/azureFirewallFqdnTag.json
   - Microsoft.Network/stable/2018-08-01/checkDnsAvailability.json
   - Microsoft.Network/stable/2018-08-01/ddosProtectionPlan.json
   - Microsoft.Network/stable/2018-08-01/endpointService.json
@@ -630,6 +631,9 @@ directive:
   - suppress: RequiredPropertiesMissingInResourceModel
     from: azureFirewall.json
     reason: name, id and type properties are inherited from the upper level
+  - suppress: RequiredPropertiesMissingInResourceModel
+    from: azureFirewallFqdnTag.json
+    reason: name, id and type properties are inherited from the upper level
   - suppress: RequiredPropertiesMissingInResourceModel
     from: checkDnsAvailability.json
     reason: name, id and type properties are inherited from the upper level