Azure Networking Cookbook

How it works...

When an NSG is associated with a subnet, the rules in the NSG will apply to all of the resources in the subnet. Note that the subnet can be associated with more than one NSG and the rules from all the NSGs will apply in that case. Priority is the most important factor when looking at single NSGs, but when the rules from more NSGs are observed, the deny rule will prevail. So, if we have two subnets, one with allow on the 443 port and another one with the deny rule on the same port, traffic on this port will be denied.