Home › Forums › Azure › NSG question › Reply To: NSG question
-
Hi samabc, thanks for reaching out.
While the Connection Troubleshoot result shows that traffic over port 443 from TD1 to TD2 is unreachable, this does not necessarily indicate that TDNSG1 is not associated with TD2. The inbound rules defined in TDNSG1 specifically target traffic destined for the 10.0.2.0/24 subnet, which is where TD2 resides. This suggests that TDNSG1 is intended to filter inbound traffic to TD2 and is likely associated with either its network interface or subnet.
If TDNSG1 were instead associated with TD1, the defined rules would not apply, as the destination would not match the rule criteria. Additionally, the successful ICMP connection from TD1 to TD2 supports the conclusion that both virtual machines are within the same virtual network and that TDNSG1 is actively filtering traffic to TD2.
The priority 310 deny rule applies exclusively to TCP traffic and does not affect ICMP protocols, which is why ICMP connectivity remains successful. The unreachable status for TCP port 443 is likely due to TD1 not being configured to listen for incoming connections on that port.
I hope this helps! Let us know if you need further assistance.
Best regards,
JR @ Tutorials Dojo