Deny.netInbound Azure NSG

Question

For Azure Network Security Groups (NSGs), we have a default inbound security rule called Allow.netInBound rule.

Allow.netInboundRule - https://learn.microsoft.com/en-us/azure/virtual.network.network-security-groups-overview#allow.netinbound

But is there a way to create a rule that denies .net to .net inbound rule? I am trying to achieve this both from portal and azure powershell, but I don't see any .net option in the dropdown for the source.

Answer 1

if I understood correctly, you could use the Service Tag called 'VirtualNetwork' in your Inbound Security Rules, and it should be enough to Deny inbound traffic coming from the same Virtual Network.