You need to meet the technical requirements for VNetwork1. What should you do first?
From scenario: Deploy Azure Firewall to VNetwork1 in Sub2. Azure firewall needs a dedicated subnet named AzureFirewallSubnet. Reference: https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal