While a network security group provides a certain degree of network security on the switching and transport level of the OSI Reference Model, situations may arise in which you want to enable security for the higher levels of the stack.
In these situations, it is advisable to provide appliances provided by Azure partners for the security of virtual networks. These solutions are called Network Virtual Appliances (C).