How would I change my 1521 port to stop being exposed to the internet while still allowing connection from the rest of the Vnet

Question

How would I configure the NSGs to allow 1521 communication to occur with exposing to the public internet

Answer 1

Hi @Norton, Joshua , I understand that you want to allow vNet connection to TCP port 1521 using NSG.

You need to add an inbound entry to the NSG applied to your subnet (if there is no NSG applied, create a new one and associate it to your subnet):

• Priority = 100 (or any number between 100 and 4096. Rules are processed in priority order, with lower numbers processed before higher numbers)
• Source = VirtualNetwork (or your FrontEnd subnet's CIDR)
• Source ports = * (0-65535)
• Destination = VirtualNetwork (or your DB subnet's CIDR)
• Destination ports = 1521
• Protocol = TCP
• Access = Allow

There is a default Deny Outbound rule to deny everything else:

Priority	Source	Source ports	Destination	Destination ports	Protocol	Access
65500	0.0.0.0/0	0-65535	0.0.0.0/0	0-65535	Any	Deny

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.