Forum Discussion
Vasuummidi
Feb 18, 2022Copper Contributor
Manage via outbound NSG
If we want to block youtube and facebook through NSG how do we do that through NSG?
fernandoloureiro
May 25, 2022Copper Contributor
Hi,
It's almost impossible to block this kind of service using Network Security Groups. NSG only filter at L3/L4 , it means, IP addresses and Ports. To achieve that you would need to identify all IP addresses from that services and add them in to rules what is a nightmare to address and maintain. For those kind of filtering the appropriate service is Azure Firewall Premium SKU or an 3rd Party NVA Firewall/Proxy.
It's almost impossible to block this kind of service using Network Security Groups. NSG only filter at L3/L4 , it means, IP addresses and Ports. To achieve that you would need to identify all IP addresses from that services and add them in to rules what is a nightmare to address and maintain. For those kind of filtering the appropriate service is Azure Firewall Premium SKU or an 3rd Party NVA Firewall/Proxy.