Network Security Group
-
Lets try to create a network with 6 subnets

-
Now if we want to create a rule in such a way that web subnet can be communicated from any resource in AppGateway, Management, Business Subnet
-
In this case creating a rule at subnet level is better as it has to be applied to all resources in subnet.
-
NSG can be applied at subnet level also
-
Now lets create deny rules for AD and db subnets

-
Attach nsg to web subnet

-
Now create a nsg rule for business subnet which should not allow inbound connections from application gateway subnet.

-
Exercise:
- Create a network diagram with 3 subnets
- Web
- App
- Db
- Try to depict the communication in the diagram
- Create a network diagram with 3 subnets
-
Install Azure CLI and Powershell Refer Here
