Default outbound nsg rule

Question

Hi, In Cloudcheckr I am receiving findings related to outbount connection in network security groups. The findings are as below:

1. Network Security Groups Outbound Rules Set To All Ports
2. Network Security Groups Outbound Rules with Dangerous Ports Exposed
3. Network Security Groups Outbound Rules with Potentially Dangerous Ports Exposed

The findings are shown for network security group outbound rules which are added by default. Is there any way I can modify this default rules or delete them ? How could I be able to access Internet if I block outbound connection ?

Answer 1

Default NSG rules can't be modified or deleted.
Source: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview#default-security-rules

You can add your own rules with higher priority (lower number) to fit your needs.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten