Articles → MICROSOFT AZURE → ASG (Application Security Group) In Microsoft Azure

ASG (Application Security Group) In Microsoft Azure

In this article, we will discuss ASG (Application Security Group) in Microsoft Azure.

Purpose

Consider a scenario where a network security group is attached to 6 virtual machines.

Picture showing the 6 virtual machines in a single NSG

Click to Enlarge

The NSG allows port 22, and our requirement is to block port 22 for only one virtual machine. In this scenario, ASG comes into play.

Picture showing a virtual machine where ASG is applied

Click to Enlarge

Implementation

To implement ASG, we will perform the following steps: -

Create a virtual machine.
Associate ASG with the virtual machine.
Deny port 22 on ASG.

So, let us get started.

Create A Virtual Machine

First, create a virtual machine.

Picture showing the virtual machine created in Azure

Click to Enlarge

Associate ASG With The Virtual Machine

To associate the ASG, go to the virtual machine details page. On the "Networking" tab, click "Configure the application security groups".

Picture showing the Configure the application security groups button for associating ASG with virtual machine

Click to Enlarge

A window will appear on the right. Select the ASG and click the "Save" button.

Picture showing a section to select the application security group

Click to Enlarge

The ASG is associated with the virtual machine.

Picture showing the ASG associated with the virtual machine

Click to Enlarge

Deny Port 22 On ASG

Create a rule in NSG and specify ASG as the source. Allow only ports from 1 to 21.

Picture showing creating an inbound rule with ASG as source

Click to Enlarge

Posted By -	Karan Gupta

Posted On -	Thursday, February 17, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**