Book Image

Learn Azure Administration

By : Kamil Mrzygłód
Book Image

Learn Azure Administration

By: Kamil Mrzygłód

Overview of this book

Microsoft Azure is one of the upcoming cloud platforms that provide cost-effective solutions and services to help businesses overcome complex infrastructure-related challenges. This book will help you scale your cloud administration skills with Microsoft Azure. Learn Azure Administration starts with an introduction to the management of Azure subscriptions, and then takes you through Azure resource management. Next, you'll configure and manage virtual networks and find out how to integrate them with a set of Azure services. You'll then handle the identity and security for users with the help of Azure Active Directory, and manage access from a single place using policies and defined roles. As you advance, you'll get to grips with receipts to manage a virtual machine. The next set of chapters will teach you how to solve advanced problems such as DDoS protection, load balancing, and networking for containers. You'll also learn how to set up file servers, along with managing and storing backups. Later, you'll review monitoring solutions and backup plans for a host of services. The last set of chapters will help you to integrate different services with Azure Event Grid, Azure Automation, and Azure Logic Apps, and teach you how to manage Azure DevOps. By the end of this Azure book, you'll be proficient enough to easily administer your Azure-based cloud environment.
Table of Contents (15 chapters)
1
Section 1: Understanding the Basics
5
Section 2: Identity and Access Management
9
Section 3: Advanced Topics

Reviewing NSG rules 

When an NSG is created, it contains a set of default rules that completely shut down the inbound and outbound traffic:

Figure 3.25 – Default security rules

The current setup can be read as follows:

  • It allows for any inbound traffic that originates in the VNet and ends in the VNet (see the SOURCE and DESTINATION columns).
  • It allows for any inbound traffic that accesses a load balancer first (see the SOURCE column).

  • It denies any traffic that does not fulfill the preceding inbound rules (the lowest priority rule—65500).
  • It allows for outbound traffic inside the network.
  • It allows any resource in the VNet to access the internet (see DESTINATION column).
  • It denies any outbound traffic that does not meet the preceding outbound rules (the lowest priority rule65500).

You should see the preceding result when you access your NSG in the portal. In fact, a similar result is displayed when creating a security group via the CLI:

...