Articles → MICROSOFT AZURE → ASG (Application Security Group) In Microsoft Azure

ASG (Application Security Group) In Microsoft Azure

In this article, we will discuss ASG (Application Security Group) in Microsoft Azure.

Purpose

Consider a scenario where a network security group is attached to 6 virtual machines.

Picture showing the 6 virtual machines in a single NSG

The NSG allows port 22, and we require to block port 22 for only one virtual machine. In this scenario, ASG comes into play.

Picture showing a virtual machine where ASG is applied

Implementation

To implement ASG, we will perform the following steps: -

Create An Application Security Group
Create a virtual machine
Associate ASG with the virtual machine
Deny port 22 on ASG

So, let us get started.

Create An Application Security Group

To begin with, search the application security group in the search box.

Picture showing searching the application security group in search box

The following screen will appear.

Picture showing a screen with a list of application security group

Click on the "+ Create" button. The following window will appear.

Picture showing a screen for creating the application security group

Enter the details and click on the "Review + create" button for data validation. Once the data validation is done, click on the "Create" button to create the application security group.

Create A Virtual Machine

To begin with, create a virtual machine.

Picture showing the virtual machine created in Azure

Associate ASG With The Virtual Machine

To associate the ASG, go to the virtual machine details page. Go to "Networking" → "Application security groups".

Picture showing the Application Security Group under Networking

The following window will appear. Click on "Add application security groups".

Picture showing the Add application security groups button for associating ASG with virtual machine

A window will appear on the right. Select the ASG and click the "Add" button.

Picture showing a section to select the application security group

The ASG is associated with the virtual machine.

Picture showing the ASG associated with the virtual machine

Deny Port 22 On ASG

Create a rule in NSG and specify ASG as the source. Allow only ports from 1 to 21.

Picture showing creating an inbound rule with ASG as source

Posted By -	Karan Gupta

Posted On -	Thursday, February 17, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**