Securing Azure VNet
The most common question that anyone asks when they buy a service is, can it be secured? The answer to that question in this case is, absolutely yes.
Besides the security Microsoft provides for Azure from its side, there is some configuration that you can do from your side to increase the level of security to your virtual network.
For a higher level of security, you can use the following:
- NSG: It is like a firewall that controls the inbound and outbound traffic by specifying which traffic is allowed to flow to/from the NIC/subnet
- Distributed denial of service (DDoS) protection: It is used to prevent DDoS attacks and at the time of writing is in preview
NSG
NSG controls the flow of traffic by specifying which traffic is allowed to enter or exit the network.
Creating NSG
Creating an NSG is a pretty straightforward process. To do it, you need to follow these steps:
- Navigate to Azure portal, and search for
network security groups, as shown in the following screenshot:
Figure 2.13:...
