How to block internet access in azure virtual network?

Question

Hi, i'm alan.

I have a question about azure cloud network setting.

I just want to block or allow internet access in azure virtual network.

for example:

• virtual network address space in 10.0.0.0/8
• vm1 ip is 10.1.0.4 / external ip none.
• vm2 ip is 10.2.0.5 / external ip none.

so, i just want to block internet access vm1, and then allow internet access vm2.
is it posibble in route table? or possible anything else(solution, service, etc...)?

so, i tried to route table override 0.0.0.0/0 to setting.
but, after setting then internet is block in virtual network only.
not allow internet service in specific ip address.

could you tell me some solution?

Thanks
Alan

Answer 1

Hi @leesh2143 ,

you can use Azure Network Security Groups (NSGs) to limit internet outbound traffic.
NSGs could be associated with subnets and/or VMs
With Security Rules (for inbound and/or outbound traffic) it's possible to block outgoing internet traffic using the service tag Internet in the Security Rule.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Hi anonymous user ,

create a deny Security Rule for internet access to any destination ip with priority 200 (for instance).
Create another Security Rule witch will allow internet access to particular destination IP (for instance priority 190 / lower number than the deny Security Rule).

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

How to avoid snipping in Azure Virtual desktop

Answer 4

Here are a few common methods you can disable or disconnect the VM's virtual network interface card (NIC) from the network, effectively blocking its internet access.