Azure network rules - statefull firewall

[Michal Garcarz]

Hello Team,

There are so many different types of network rules in Azure. For example those defined for cloud services:

https://msdn.microsoft.com/en-us/library/azure/gg557551.aspx

Or network security groups for VM traffic.

Are any of those statefull firewalls ? Do we track TCP sessions ? And accept return traffic by default ?

For example inbound security rules in NSG: it looks like returning traffic is accepted by default ? Assuming it's matching corresponding session (so we need to track TCP sessions). Are we statefull then ?

Thanks,

[#2 · Accepted solution]

Hi Michal,

Azure NSG rules are statefull, means if you allow inbound traffic the same outbound traffic  allowed