多奇 IT 部落格

記錄著多奇數位在工作中對資訊技術的心得筆記

前言

以往 Azure VM 只能利用 Endpoint 加上 ACL (Access List Control) 來管理 Inbound 的流量，如下圖：
且Outbound 的流量只能透過作業系統裡面的 Windows Firewall 來控管。

image

而微軟推出了較新的技術，給予雲端資源能有更安全的管理機制，就是 Network Security Group (以下稱 NSG)。除了可以控制 Inbound 之外，也可以限制流量輸出，NSG 可和 vNet、Subnet、VM、NIC 做關聯，讓您在雲端安全控管方面更有彈性、更有掌握能力。

實作

以下我們以一個簡易情境：讓 Azure VM (Windows Server 2012 R2) 不能透過 TCP_80 port 上網，一般實務上都會建議把此規則建立起來，因為 Server 都是提供重要服務，若輕易上網、下載檔案，很容易有資安風險。

預設 Azure VM (v2 - 資源管理員類型) 建立起來後就會有一個 Network Security Group，而這個 NSG 是綁在 VM 的網卡上，如下圖：
image

目前 Azure VM 是可以上網的狀態：
image 

  1. 登入 Azure Portal
    https://portal.azure.com
  2. 選擇欲設定的 NSG →所有設定→輸出安全性規則 (Outbound)
    image
  3. 新增→輸入名稱、優先順序(數字越小越優先)→目的地、來源及埠號
    image
  4. 往下捲記得選擇 拒絕 / 允許 ，這是非常重要的設定哦！
    image 
  5. 設定完成後，Azure VM 就不能透過瀏覽器上網了！
    如果設定完成後，還是可以連接同一個頁面的話，請連接看看別的頁面 (有可能是瀏覽器的cache)
    image

限制

注意 Endpoint 加 ACL 不可和 NSG 同時存在，若已經有 Endpoint 加 ACL，想要加 NSG，請先移除原有設定。

相關連結

 

== 要試用 Azure的朋友 ，請點選 Azure Free Trial – 試用 30 天期 進行試用申請。 ==

留言與評論

Lavenia Villaneva

Hello There. I found your blog using msn. This is a really well written article. I will be sure to bookmark it and return to read more of your useful information. Thanks for the post. I抣l certainly return.<a href="http://www.ud8.top/">history</a>.

Lavenia Villaneva

Lillian Hytros

Wow, marvelous blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your site is great, let alone the content!<a href="http://www.54m.top/">sports</a>.

Lillian Hytros

httP://www.8sky.top

Hello, you used to write great, but the last few posts have been kinda boring?I miss your tremendous writings. Past several posts are just a little out of track! come on<a href="http://www.8sky.top/">entertainment news</a>!

httP://www.8sky.top

httP://www.8sky.top

Hey, you used to write wonderful, but the last several posts have been kinda boring?I miss your tremendous writings. Past few posts are just a little bit out of track! come on<a href="http://www.8sky.top/">sports news</a>!

httP://www.8sky.top

httP://www.8sky.top

I've been absent for a while, but now I remember why I used to love this blog. Thanks, I'll try and check back more frequently. How frequently you update your <a href="http://www.8sky.top/">technology news</a>.

httP://www.8sky.top

httP://www.8sky.top

Hey, you used to write magnificent, but the last several posts have been kinda boring?I miss your super writings. Past several posts are just a little bit out of track! come on<a href="http://www.8sky.top/">SKY news</a>!

httP://www.8sky.top

httP://www.8sky.top

I've been absent for some time, but now I remember why I used to love this blog. Thank you, I'll try and check back more often. How frequently you update your <a href="http://www.8sky.top/">SKY news</a>.

httP://www.8sky.top

httP://www.8sky.top

I have been absent for a while, but now I remember why I used to love this website. Thanks, I'll try and check back more often. How frequently you update your <a href="http://www.8sky.top/">SKY news</a>.

httP://www.8sky.top

httP://www.8sky.top

I've been absent for some time, but now I remember why I used to love this web site. Thank you, I will try and check back more frequently. How frequently you update your <a href="http://www.8sky.top/">breaking news</a>.

httP://www.8sky.top

www.8sky.top

I like what you guys are up also. Such clever work and reporting! Keep up the superb works guys I have incorporated you guys to my blogroll. I think it'll improve the value of my <a href="http://www.8sky.top/">sports news</a>.

www.8sky.top

www.8sky.top

Hey, you used to write magnificent, but the last few posts have been kinda boring?I miss your tremendous writings. Past few posts are just a little bit out of track! come on<a href="http://www.8sky.top/">SKY news</a>!

www.8sky.top

Barb Gretter

Go to the website, https://mimde.com, Animation d Ă©quipe pdf, Music posters, Pets to have, Sports usa, G travel morocco, Casino in new orleans, Blogs i can read, Comedy works landmark, Entertainment karting, Bail co, Nursing 7 rights, Charity s bird, Malpractice 2000

Barb Gretter

Kacey Rochat

BĂ­ mật tĂªn lá»­a đạn đạo thế hệ má»›i của Triều TiĂªn. Movie https://www.youtube.com/watch?v=n3oFLEj1NcY

Kacey Rochat

Rena Bietsch

Iran dọa tấn cĂ´ng hạm Ä‘á»™i của Mỹ. Movie https://youtu.be/X3qYfwYx1aY

Rena Bietsch

Annalisa Turrie

Pantsir-S1 vượt trội hơn Iron Dome. Movie https://www.youtube.com/watch?v=uedPiziyTHk

Annalisa Turrie

Young Lepore

BĂ­ mật tĂªn lá»­a đạn đạo thế hệ má»›i của Triều TiĂªn. Movie https://youtu.be/n3oFLEj1NcY

Young Lepore

Jc Claybaugh

Pantsir-S1 vượt trội hơn Iron Dome. Movie https://youtu.be/uedPiziyTHk

Jc Claybaugh

Amber Genthner

Trump bất ngờ lệnh Ă¡p thuế toĂ n bá»™ 500 tá»· hĂ ng hoĂ¡ Trung Quốc. Movie https://youtu.be/-Wp5Guah6uc

Amber Genthner

Moriah Pirkey

Trump bất ngờ lệnh Ă¡p thuế toĂ n bá»™ 500 tá»· hĂ ng hoĂ¡ Trung Quốc. Movie https://youtu.be/-Wp5Guah6uc

Moriah Pirkey

Gertude Mallory

Iran từ chối Ä‘Ă m phĂ¡n vá»›i Mỹ. Movie https://youtu.be/i40eCSLT7ww

Gertude Mallory

Ike Cloke

Visit website https://rubxe.com Film 1983, 4 music tv, Petsmart w plano, Sports seasons, X travel city backpack, Gambling age in vegas, People republic of china, Comedy 017, Conference zone meaning, Likely loans, Plumbers t piece, R charity facebook, 6 elements of malpractice

Ike Cloke

Lenna Vanwieren

Absolutely indited subject material, regards for entropy. "The earth was made round so we would not see too far down the road." by Karen Blixen.

Lenna Vanwieren

本篇文章的留言功能已關閉！