Application Security Groups (ASG) and Network Security Groups (NSG)

---

I just finished watching the “Steps to Create and Configure NSGs and ASGs” in the AZ-500 course, and it left me scratching my head. I was not aware I could use ASGs to filter traffic to a VM before watching the episode. However, after watching the episode, I had more questions than answers. I watched the video twice. The episode left out one crucial step. I had to read this article to understand why and how to use ASGs to filter network traffic: https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic. The episode used any any for source and destination. The article shows me that I must put the proper ASG as the destination and then apply that specific ASG to the correct NIC.

Looking forward to working with Firewalls in Azure next.

@Donald-Muncy , I hope all is well. I am glad that the episode provided another option for you to consider. In the demo/walkthrough, I use any / any just as an example so that it makes sense and everyone can follow along, especially if they are trying to reproduce as part of studying. In the real world you would want to be more granular and specify source and destination as an exact value.

Remember that for exam purposes it is the details in the question that provide the path to the correct answer.

Good luck with Firewalls !!!

If you have any other questions, or if I can be of any assistance as you continue working through the course, please be in touch as needed.

My direct e-mail is adam@itpro.tv

Cheers,

Adam