When setting up a virtual network in Azure for an RSI client, there are a few different options we use to protect a client’s network. Network Security Groups/NSG’s are thought of as a basic allow/deny rule for each section of the virtual network. The Azure Firewall, fully managed and providing advanced security, functions much like a normal firewall and will work in conjunction with NSG. Both need to be used in conjunction for the best result.
