Cloudguard Azure NSG

[Scott_Paisley]

Hi

We deployed a Cloudguard cluster in Azure. Evrything working fine, except a number of security posture management tools are complaining that the NSG attached to the firewalls has a wide open ruleset (which is true)

I am wondering if there is a recommended set of rules for the NSG to clean that up?

Thanks

[Chris_Atkinson]

In general duplicating or mirroring the firewall rules on an ongoing basis within the NSG logic isn't efficient / useful.

With that said the use of an NSG is noted in the relevant guides for restricting access to the GAiA web portal but would need to be broad in what it allows otherwise.

Whether this approach would be sufficient to please the tools in question is another matter.