Verifying flows
Network Watcher can be used to verify traffic flows inside your network using a feature called IP flow verify. It’s meant to be used with Azure Virtual Machines, and its main purpose is to validate the network rules applicable to a given machine. Conceptually, it’s a simple feature – all you need is to configure the correct machine, IP, and ports you’d like to verify. In the Azure portal, it looks like this:
Figure 15.1 – IP flow verify screen in the Azure portal
If the connection is allowed, you’ll be notified about it as follows:
Figure 15.2 – Result of running IP flow verify when a connection is accepted
However, if a connection cannot be established (for instance, because of existing rules in the network security group assigned to the network interface of a machine), you’ll get information on what is blocking it (see Figure 15.3):
...
