Questions tagged [network-security-group]
The network-security-group tag has no usage guidance.
12
questions
10
votes
2
answers
21k
views
Azure firewall vs Azure network security group
I've been trying to understand the difference between a Azure firewall (https://azure.microsoft.com/en-us/services/azure-firewall/) and the features offered by NSGs/network security groups (https://...
- 223
7
votes
4
answers
4k
views
Is it safe to allow inbound 0.0.0.0/0 on EC2 security group?
I created an EC2 instance on AWS, and I was assigned a default "security group". I understand that this acts as a virtual firewall for my server.
I had trouble connecting into this EC2 ...
- 201
2
votes
3
answers
4k
views
Azure NSG not allowing traffic
I am having an odd issue.
I have a Windows server in Azure which I have installed Splunk on and I can't get to the web UI.
I created it from the default template and I have deleted it and tried to ...
- 23
1
vote
1
answer
5k
views
In an Azure network security group, is denying all traffic before the "AllowVnetInbound" and "AllowAzureLoadBalancerInbound" rules good practice?
This set of Azure Network Security Group inbound rules came from a "best practice" blog.
I understand this to mean there isn't any way for any network traffic to pass the "DropAll" ...
1
vote
0
answers
49
views
EC2 - Windows Server - Not openning 41890 port
I have a client' EC2 Instance with Windows Server 2016 Datacenter OS, IIS 10.0 running an ASP Classic Web Site and an Elastic IP associated. Everything ok until there. The set up of the web server ...
0
votes
1
answer
4k
views
Attach NSG to Existing Subnet Using ARM Template
I'm looking to create a Network Security Group (NSG) in Azure and attach it to an existing subnet using an ARM Template. I've already come across this site: https://github.com/Azure/azure-quickstart-...
- 688
0
votes
1
answer
756
views
Azure NSG blocking VPN routed traffic
In our Azure landscape we have a couple of VMs. For one of those we have the requirement that it needs to have a DNS name to be able to access it. We had some trouble with private DNS zones in the ...
- 185
0
votes
1
answer
90
views
Is it possible to have security rules for different backend pools of an Azure Application Gateway?
I have an Azure Application Gateway in front of an AKS cluster. The cluster has some internal IP addresses published through an Internal Load Balancer, so with ip addresses from the subnet where the ...
0
votes
0
answers
73
views
Azure Policy to Audit if NSGs contain a rule where Source and Destination match and are both IP addresses
I'm trying to create an azure policy that audits my NSGs.
I need to verify if my NSGs contain a rule where the source and destination match and are both IP addresses (so not "Virtual Machine"...
- 11
0
votes
1
answer
192
views
Azure Cloud Service extended support - apply IP filtering rules
I'm configuring Azure Cloud Service (extended support). Part of the requirements is to apply certain IP security rules, e.g. RDP only from a whitelist of addresses, and some others. With individual ...
- 986
0
votes
0
answers
308
views
Azure VM, unable to connect from internet on ports configured (9089-9095)
I have created a VM on Azure with below steps:-
Created VM
Assigned a public static IP
Created a new Virtual Network (Subnet default - (10.0.0.0/24)
Did not create a NSG initially (NIC NSG was NONE - ...
0
votes
0
answers
598
views
Access RabbitMQ using floating IP associated with the VM
I have a virtual machine (VM) running on OpenStack, on which I installed OpenStack using Packstack. I associated a floating IP with that VM.
In OpenStack, I configured the ingress access rules for ...
- 101