Using Azure firewall's private IP for routing to VNET resources

Hi,

I just wanted to know whether we can use Azure firewall's private IP to route to resources located in same VNET.

In our scenario we have one VNET and in that there are 2 subnets communicating with each other using private addresses. So is it a good practice to place firewall in between those subnets.

Thanks,

Pradeep