Default Outbound Network Security Group Rules Description Priority Source Address Source Destination Destination Protocol Action Port Address Port Allow 65000 VIRTUAL_NETWORK * VIRTUAL_NETWORK * * Allow virtual network outbound Allow 65001 * * INTERNET * * Allow Internet outbound Deny all 65500 * * * * * Deny outbound Subscription Limits for Network Security Groups Object Resource Management Subscription Limits Network Security 100 per region/per subscription Groups 1 Network Security Group per subnet 1 Network Security Group per network adapter 1 Network Security Group can be linked to multiple subnets or network adapters Network Security 200 rules per Network Security Group* Group rules *Can be increased by Microsoft support personnel to a maximum of 400 rules per Network Security Group. Default tags are system-provided identifiers to address a category of IP addresses. Default tags can be specified in customer-defined rules. Note that the format of the tags is different for ASM versus ARM NSG rules. The default tags are as follows: Tag Description VirtualNetwork (ARM) This default tag denotes all of your network address space. It includes the virtual network address space (IP CIDR in Azure) and all connected
Default Outbound Network Security Group Rules Description Priority Source Address Source Port Destination Address Destination Port Protocol Action Allow virtual network outbound 65000 VIRTUAL_NETWORK * VIRTUAL_NETWORK * * Allow Allow Internet outbound 65001 * * INTERNET * * Allow Deny all outbound 65500 * * * * * Deny Subscription Limits for Network Security Groups Object Resource Management Subscription Limits Network Security Groups 100 per region/per subscription 1 Network Security Group per subnet 1 Network Security Group per network adapter 1 Network Security Group can be linked to multiple subnets or network adapters Network Security Group rules 200 rules per Network Security Group* *Can be increased by Microsoft support personnel to a maximum of 400 rules per Network Security Group. Default tags are system-provided identifiers to address a category of IP addresses. Default tags can be specified in customer-defined rules. Note that the format of the tags is different for ASM versus ARM NSG rules. The default tags are as follows: Tag Description VirtualNetwork (ARM) This default tag denotes all of your network address space. It includes the virtual network address space (IP CIDR in Azure) and all connected
Hybrid%20Cloud%20-%20Azure%20Reference%20Architecture%20-%20Partner.docx