Need to restrict All outgoing traffic in NSG

Mahavir Saroj 201

We are planning to restrict Outbound traffic in NSG. How to identify legitimate outgoing traffic from VM?

For Eg:- Azure VM agent needs some outbound connectivity towards the Internet. Is there any article where we can see the required outbound connectivity.

KapilAnanth-MSFT 35,251 Reputation points Microsoft Employee

2024-04-12T06:39:10.8633333+00:00
@Mahavir Saroj ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

You should consider using NSG flow logs if you are interested in logging the traffic going in and out of a VM.

Note that the NSG flow logs only stores the logs in a Storage Account.

For Visualization, you should use Traffic Analytics : Visualize NSG flow logs using Network Watcher traffic analytics

Some of the use cases are :

Find traffic hotspots

Visualize traffic distribution by geography

Visualize traffic distribution by virtual networks

View ports and virtual machines receiving traffic from the internet

View information about public IPs' interacting with your deployment

Visualize the trends in NSG/NSG rules hits

For more details : Usage scenarios of traffic analytics

Kindly let us know if this helps or you need further assistance on this issue.

Cheers,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

1 answer

Marcin Policht 11,385 Reputation points MVP

2024-04-09T21:42:43.65+00:00

Use NSG logs in combination with Traffic Analytics to identify legitimate outbound connectivity

https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.

0 comments No comments
Sign in to comment