Azure Virtual Network Manager security admin rule generally available in all public regions

Azure Virtual Network Manager security admin rule lets you enforce security policies for your virtual networks at scale across subscriptions and regions globally. These rules will be evaluated before network security groups (NSGs), ensuring standardized security enforcement. They help prevent potential misconfigurations and oversights, making sure that critical services run without interruption and that network owners adhere to company policies. Learn how Microsoft is using security admin rules to secure its Azure-based deployments and enforce network isolation across the organization.

Security admin rules allow users to manage security efficiently, reducing operational complexities. They also offer a default setting to avoid errors or oversights in setting up NSGs. As such, users can simplify and enhance their network security for their growing network environments.

To learn more about security admin rules and their use cases, please see the public documentation on security admin rule concepts. The traffic that is allowed or denied by security admin rules can be monitored with VNet flow logs. See the VNet flow logs documentation for more information.