Skip to main content

Virtual Machine Does Not Have Network Security Group

Overview​

This check verifies that every network interface attached to an Azure Virtual Machine is covered by a Network Security Group, either assigned directly to the NIC or to the subnet the NIC is in. Network Security Groups filter inbound and outbound traffic; a NIC with no NSG on either the interface or its subnet is unfiltered. To remedy, assign an NSG to the NIC or to the subnet that the NIC connects to.

Vendor​

Azure

Cloud Service​

Compute

Input​

{"enabled":{"label":"Enable this Check","helpText":"If true, this check will run and return results for the enabled scope","value":false,"type":"boolean"}}

References​

https://www.azadvertizer.net/azpolicyadvertizer/03d46a5e-3a84-43ee-83b5-d7f7ee7c8a57.html, https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Severity​

4

Item Types​

Microsoft.Compute.VirtualMachine

Microsoft.Network.networkInterfaces, Microsoft.Network.virtualNetworks