{"id":6418,"date":"2022-12-01T02:10:01","date_gmt":"2022-12-01T02:10:01","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6418"},"modified":"2022-12-01T02:10:45","modified_gmt":"2022-12-01T02:10:45","slug":"how-to-block-ports-on-azure-vpn-gateway-with-azure-firewall","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/how-to-block-ports-on-azure-vpn-gateway-with-azure-firewall","title":{"rendered":"How to Block Ports on Azure VPN Gateway with Azure firewall"},"content":{"rendered":"\n

Recently setup a Site to Site ( S2S ) Connection into a VNET of an Azure Tenant<\/p>\n\n\n\n

By Default the existing Network security group attached to the VNET allows VirtualNetwork Traffic ( Any <-> Any ) <\/p>\n\n\n\n

Virtual Network Gateway is Include in this Virtual Network Traffic<\/p>\n\n\n\n

I needed to Limit the Inbound Ports allowed across this Gateway <\/p>\n\n\n\n

As there is no NAT performed , I can target the Subnet or Subnets of the source Connection ( in this case 10.0.0.0\/24) and enable 2 Deny rules for the two servers in the Vnet <\/p>\n\n\n\n

I then created two allow rules above it for the traffic needed to Pass.<\/p>\n\n\n\n

You can replicate the same setup for Outbound<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

Recently setup a Site to Site ( S2S ) Connection into a VNET of an Azure Tenant By Default the existing Network security group attached to the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1464,4100,2547,4101,1534,4099],"class_list":["post-6418","post","type-post","status-publish","format-standard","hentry","category-research","tag-azure","tag-block-ports","tag-firewall","tag-limit-traffic","tag-ports","tag-vpn-gateway"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t