From the course: Microsoft Azure Administrator Associate (AZ-104) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Understand networking security

Understand networking security

- [Instructor] Ensuring secure traffic flow to and between services is a core requirement for many solutions. An example is an external communication to a VM running a website. You may only want to allow traffic to the server on a particular port such as HTTPS or the port 443. The first line of defense in Azure, at the networking level anyway, is to use network security groups, or NSGs. NSGs allow you to define inbound and outbound rules that will allow or deny the flow of traffic from a source to a destination on a specific port. Although you define separate inbound and outbound rules, each rule is stateful. So this means that the flow in any one direction is recorded so that the returning traffic can also be allowed using the same route. In other words, if you allow HTTPS traffic into a service, then that same traffic will be allowed back out through the same source and destination. We create NSGs as components in Azure and then attach them to a subnet on a VNet. Each subnet can…

Contents