Creating an Application Security Group (ASG)
ASGs are an extension of NSGs, allowing us to create additional rules and take better control of traffic. Using only NSGs allows us to create rules that will allow or deny traffic only for a specific source, IP address, or subnet. ASGs allow us to create better filtering and create additional checks on what traffic is allowed based on ASGs. For example, with NSGs, we can create a rule that subnet A can communicate with subnet B. If we have the application structure for it and an associated ASG, we can add resources in application groups. By adding this element, we can create a rule that will allow communication between subnet A and subnet B, but only if the resources belong to the same application.
Getting ready
Before you start, open your browser and go to the Azure portal at https://portal.azure.com.
How to do it...
To create an ASG using the Azure portal, we must follow these steps:
- In the Azure portal, select Create...