Skip to content

Commit dcfb072

Browse files
authored
Enhance documentation with augmented security rules section
Added section on augmented security rules for network security groups, detailing their benefits and usage.
1 parent b9b3654 commit dcfb072

1 file changed

Lines changed: 16 additions & 1 deletion

File tree

learn-pr/wwl-azure/configure-network-security-groups/includes/5-create-network-security-groups-rules.md

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,21 @@ Let's look at some of the properties you need to specify to create your security
1818

1919
:::image type="content" source="../media/security-priority.png" alt-text="Screenshot that shows how to set the priority value for a security rule in the Azure portal.":::
2020

21+
### When to use augmented security rules
22+
23+
A single network security group rule can contain multiple values in the Source, Destination, and Service fields. This approach, called augmented security rules, reduces the total number of rules needed and simplifies NSG management.
24+
25+
**Things to know about augments security rules**
26+
27+
- **Multiple IP addresses**: Combine multiple IP addresses into one rule.
28+
29+
- **Multiple port ranges**: Specify multiple ports and ranges in the Service field.
30+
31+
- **Service tags and ASGs**: Mix service tags, application security groups, and IP addresses within the same rule.
32+
33+
- **Reduced rule count**: Instead of creating separate rules for each IP range or port, combine them into fewer, more manageable rules.
34+
35+
In enterprise environments with many IP ranges or services, augmented rules prevent NSG rule sprawl. For example, instead of creating four separate rules for ports 80, 443, 8080, and 8090, create one rule with all the ports.
2136

2237
> [!TIP]
23-
> Expand your learning with the [Secure and isolate access to Azure resources by using network security groups and service endpoints](/training/modules/secure-and-isolate-with-nsg-and-service-endpoints/) training module. This module includes a sandbox where you can practice.
38+
> Expand your learning with the [Secure and isolate access to Azure resources by using network security groups and service endpoints](/training/modules/secure-and-isolate-with-nsg-and-service-endpoints/) training module. This module includes a sandbox where you can practice.

0 commit comments

Comments
 (0)