Reply To: NSG rules

[Irene-TutorialsDojo]

Hi samabc,

Thank you for your valuable feedback.

We’ve carefully reviewed your suggestion in the context of the provided scenario. Accordingly, inbound traffic is first evaluated at the subnet-level NSG, and if allowed, it is then evaluated at the network interface-level (NIC) NSG.

In this case, the subnet-level NSG (TDSG-TDSub1) already has an inbound rule that allows TCP traffic on port 3389, which is required for Remote Desktop Protocol (RDP). Therefore, no further changes are needed at the subnet level.

The NIC-level NSG (TDSG-TD1), however, includes a custom rule that allows ICMP traffic on port 3389. Since RDP requires TCP, this rule does not permit proper connectivity. As such, TDSG-TD1 must be updated—either by modifying the existing rule to allow TCP or by creating a new rule that permits TCP traffic on port 3389.

We truly appreciate your initiative in reviewing the content and helping us improve its accuracy. Please feel free to reach out if you have further questions or suggestions.

Best,
Irene @ Tutorials Dojo

• This reply was modified 9 months, 2 weeks ago by  Irene-TutorialsDojo.