How do I restrict traffic from webapp to a subnet in VNet

Question

I have 3 subnets in my VNet and I would like to restrict traffic coming from a VNET integration on a webapp to just one of the three subnets. Is it possible to do that?

score 0 · Answer 1 · answered Mar 24 '18 at 18:36

0

Inbound and outbound network traffic on a subnet can be network security group controlled using a network security group. Controlling inbound traffic requires creating network security rules in a network security group, and then assigning the network security group the subnet containing the App Service Environment

answered Mar 24 '18 at 18:36

Vijisankar

48
3

Thanks for the response Vijisankar. How do I specify the Source in this case? The custom tags don't show up in the NSG(clssic) rules blade. The other option is to enter IP address. I'm not sure what IP address I am supposed to enter for inbound source. I am guessing that the IP address that's assigned to the web app via P2S VPN is dynamic? – OjasP Mar 26 '18 at 14:20

score 0 · Answer 2 · answered Apr 09 '18 at 22:08

0

It totally possible by using NSG, please follow the recommendations from the service ASE https://learn.microsoft.com/en-us/azure/app-service/environment/app-service-app-service-environment-control-inbound-traffic#creating-a-network-security-group

answered Apr 09 '18 at 22:08

Mario Lopez

1

Did you ever find out if you can do this with regular webapps? – mslot Jun 29 '20 at 10:53

How do I restrict traffic from webapp to a subnet in VNet

2 Answers2