Azure NSG and Auditing Complexity

Question

The NSG rules in azure are based on IP . How to use NSG and make it support CDN endpoints or DNSes which have multiple IP addresses. Is it possible in Azure?

Also Auditing is complex with NSG in place, as NSG use IP Addresses and Azure Policies created are based on DNS for outbound.

Answer 1

You might not get the answer here as this forum is for Azure devtest lab. Please follow up your same post on correct forum:
https://social.msdn.microsoft.com/Forums/en-US/6e78bc37-dd5d-4b1c-bb9c-0c3eca5ef8e5/azure-nsg-and-auditing-complexity?forum=WAVirtualMachinesVirtualNetwork

----------

If the response helped, do "Mark as answer" and upvote it

Answer 2

I understand that you want to permit the outbound access to CDN by using FQDN. NSG can't fulfill your request because you can use only IP address in NSG.

In this scenario, you need to use Azure Firewall or Network Virtual Appliance. These equipments support to use FQDN in its security rule.

Best regards.

Answer 3

Thanks Vaibhav.
Actually none of the other tags were suited for this question, had to choose one..