Network Security Groups (NSG)
-
Network Security Groups can allow/deny network packets
-
NSG’s have priority ranging from 100-4096
-
NSG’s will have inbound & outbound rules
-
When multiple rules are present, then the order of processing the rules is from lower to higher priorty number (If the priority no is low, it has the highest priority )
-
Guidelines:
- Never write rules which succeding numbers (300, 400)
- Deny Rules for specific ip addresses should be given highest priority (number is low) and Allow for all lower priority (number is high)
-
Refer Here for official azure documentation on Security Groups
-
Exercise: Create a NSG which allows http,ssh communication to all and deny any other packets from external sources.
