Azure Network Security Group Flashcards
1
Q
Default NSG Rules
A
Deny all inbound from internet
Allow all outbound to the internet
To stop subnets having access out add a new NSG rule and add a service tag of internet, destination port ranges * and then Action Deny with a low priority value of say 100 so that it over rules the default NSG outbound security rules