|
2 | 2 |
|
3 | 3 | ## Azure Network Watcher |
4 | 4 |
|
5 | | -[Azure Network Watcher](/azure/network-watcher/network-watcher-overview) is a regional service that enables you to monitor and diagnose network conditions. Network diagnostic and visualization tools help you understand, diagnose, and gain insights to your network in Azure. Network Watcher is designed to monitor and repair the network health of IaaS products which includes virtual machines, virtual networks, Application Gateways, and Load Balancers. |
| 5 | +[Azure Network Watcher](/azure/network-watcher/network-watcher-overview) is a regional service that enables you to monitor and diagnose network conditions. Network diagnostic and visualization tools help you understand, diagnose, and gain insights to your network in Azure. Network Watcher is designed to monitor and repair the network health of IaaS products that includes virtual machines, virtual networks, Application Gateways, and Load Balancers. |
6 | 6 |
|
7 | 7 | ## Azure Network Watcher (video) |
8 | 8 |
|
|
17 | 17 |
|
18 | 18 | ### Monitoring tools |
19 | 19 |
|
20 | | -- **Network Topology** generates a visualization of the entire network for understanding network configuration. |
| 20 | +- **Network topology** gives you an interactive map of your network across subscriptions, resource groups, and locations. You can click on resources to view traffic and connectivity details and use diagnostic tools within the map. |
| 21 | + |
21 | 22 | - **Connection monitor** provides end-to-end connection monitoring for Azure and hybrid endpoints. |
22 | 23 |
|
23 | 24 | ### Diagnostic tools |
|
32 | 33 |
|
33 | 34 | - **Packet Capture** lets you remotely create packet capture sessions to record all network traffic to and from a virtual machine (VM) or a virtual machine scale set. |
34 | 35 |
|
| 36 | +- **NSG diagnostics** detects traffic filtering issues at a virtual machine, virtual machine scale set, or application gateway level. Checks if a packet is allowed or denied to or from an IP address, IP prefix, or service tag. Identifies which security rule allowed or denied the traffic. |
| 37 | + |
35 | 38 | - **VPN troubleshoot** enables you to troubleshoot virtual network gateways and their connections. |
36 | 39 |
|
37 | 40 | ### Traffic tools |
38 | 41 |
|
39 | | -- **Flow logs** allows you to log information about your Azure IP traffic and stores the data in Azure storage. You can log IP traffic flowing through a network security group or Azure virtual network. |
| 42 | +- **Flow logs** allows you to log information about your Azure IP traffic. |
| 43 | + |
| 44 | + - **VNet flow logs (recommended)**: Enable logging at the virtual network level. Capture all supported workloads in the VNet without needing multi-level configuration. Also, record Azure Virtual Network Manager security admin rule decisions and traffic encryption status. |
| 45 | + |
| 46 | + - **NSG flow logs**: Retiring September 30, 2027. No new NSG flow logs can be created after June 30, 2025. Existing deployments should [migrate to VNet flow logs](/azure/network-watcher/nsg-flow-logs-migrate). |
| 47 | + |
40 | 48 |
|
41 | 49 | - **Traffic analytics** provides rich visualizations of flow logs data. |
42 | 50 |
|
43 | 51 | > [!TIP] |
44 | | -> Learn more about Azure Network Watcher in the [Introduction to Network Watcher](/training/modules/intro-to-azure-network-watcher/) training module. |
| 52 | +> Learn more about Azure Network Watcher in the [Introduction to Network Watcher](/training/modules/intro-to-azure-network-watcher/) training module. |
0 commit comments