Demonstration – Create and configure network security groups

In this demonstration, we will explore security groups.

Note: An interactive lab simulation for virtual networks is available that allows you to click through a similar lab if you are unable to do a live demonstration. You may find slight differences between the interactive simulation and the suggested demo, but the core concepts and ideas being demonstrated are the same.

Restrict access to PaaS resources - tutorial - Azure portal

Create a network security group

1. Access the Azure Portal.

2. Search for and select the Network Security Groups.

3. [Supporting Slide] Create a NSG explaining the settings as you go.

4. Wait for the new NSG to deploy.

Explore inbound and outbound rules

1. Select your new NSG.

2. [Supporting Slide] Discuss how the NSG can be associated with subnets or network interfaces.

3. Discuss the purpose inbound and outbound rules.

4. Review the default inbound and outbound rules.

5. Create a new rule, explaining the settings as you go. Specifically discuss the service selection (like HTTPS) and the priority settings.

Create ASG

1. [Supporting Slide] Search for and select the Application Security Groups.

2. Create an ASG explaining the settings as you go.

3. Wait for the new ASG to deploy.

4. Discuss how the ASG can be associated with NSG rules.

Associate the NSGs

1. Navigate to the NSG you created
2. Select Subnets from the Settings section.
3. In the Subnets page, select + Associate
4. Under Associate subnet, select your Virtual network.

Note: Students should now be able to complete LAB_02