Network Security Groups

• Filter network traffic to and from Azure resources in an Azure virtual network.

• Can contain multiple inbound and outbound security rules.

• Enable you to filter traffic to and from resources by source and destination IP address, port, and protocol.

• When you create a network security group, Azure creates a series of default rules to provide a baseline level of security.

• You cannot remove the default rules, but you can override them by creating new rules with higher priorities.