Articles → MICROSOFT AZURE → Priority Of Rules In NSG In Azure

Priority Of Rules In NSG In Azure

In this article, we will discuss the priority of rules in NSG works.

Creation Of A Virtual Machine

First, create a virtual machine with port 80 enabled.

Picture Showing enabling port 80 while creating the virtual machine

Click to Enlarge

Install IIS Using The Custom Extension

Once the virtual machine, install the IIS using the custom extension.

Picture Showing the installation of IIS on the virtual machine using the custom script extension

Click to Enlarge

Now, you can access the IIS home page using the web browser.

Picture Showing the IIS home page in the browser

Click to Enlarge

Adding Deny Rule In The NSG

Add a new rule of priority 290. So, if the user tries to access port 80 (i.e., accessing the IIS home page using a browser) then the rule of the NSG will be scanned from top to bottom.

Once a rule is matched, then the rest of the rules will be ignored. So, if the user tries to access port 80 then he will be denied because of a rule with priority 290.

Picture Showing the inbound port rule for denying the port 80 on the virtual machine

Click to Enlarge

Checking The Deny Rule

Now, access the IIS home page, and you will get the following error.

Picture Showing the error message when IIS home page is accessed using the browser

Click to Enlarge

Posted By -	Karan Gupta

Posted On -	Saturday, May 22, 2021

Query/Feedback

Your Email Id

Subject

Query/Feedback	Characters remaining 250