How to enable NSGs in Microsoft Azure Security Center?

Like all other security policies, Microsoft Azure Security Center also plays an important role in explaining the entire set of controls residing inside one’s Azure subscriptions policies by considering the needs of your company’s security as well as the applications type.

For experiencing and utilizing enhanced Azure Networking, the users have to permit a NSG (Network Security Group)as suggested by the Azure Security Center. These Network Security Groups will decide that whether to permit the network traffic to be on your Virtual Machine instances in a Virtual Network or not and can do this by making use of the list of ACL (Access Control List) rules. Note that the users may face issues in getting the inner access to the Azure Network, in case the NSGs is not enabled.

Microsoft’s Azure Security Center

NSGs can get linked to individual Virtual Machines instances present inside a subnet or can also be linked to the entire subnet. But if you want to limit the traffic to individual Virtual Machines then associate anNSG to the particular VM directly because associating an NSG to a subnet will results in the application of the ACL rules to all the VM instances in that particular entire subnet.

Hence, on the behalf of Azure Security Center; we suggest two things written below in case the NSGs have not been enabled by the users using Azure Service: 

Decision about the application of the NSGs and about which level, subnet or Virtual Machine one should make use of, is all at users end. Read and follow as mentioned below to enable NSGs in Azure Security Center.

Examine and enter the Azure Security Center’s recommendation table. Now, choose ‘Enable Network Security Groups’ either on subnets or on virtual machine as you prefer, provided under the Recommendations blade.

Taking this step will open the blade ‘Configure Missing Network Security Groups’ for individual virtual machines or for entire subnet that depends on the suggestion made by you.

Then choose a virtual machine or a subnet on which an NSG is to configure.

Doing this will bring a ‘Choose network security group’ blade in front of your computer screen. Here, either click the option of an existing NSG or can also click “Create new” option, if want to create an NSG. 

This article is all about enabling and configuring Network Security Groups in  Microsoft’s Azure Security Center for the managing the Azure network access.

Source: http://lenapcexpert.blogspot.in/2017/05/how-to-enable-nsgs-in-microsoft-azure.html