Network Security Groups (NSG)

• Network Security Groups can allow/deny network packets

• NSG’s have priority ranging from 100-4096

• NSG’s will have inbound & outbound rules

• When multiple rules are present, then the order of processing the rules is from lower to higher priorty number (If the priority no is low, it has the highest priority )

• Guidelines:

  • Never write rules which succeding numbers (300, 400)
  • Deny Rules for specific ip addresses should be given highest priority (number is low) and Allow for all lower priority (number is high)

• Refer Here for official azure documentation on Security Groups

• Exercise: Create a NSG which allows http,ssh communication to all and deny any other packets from external sources.