Using IP flow verify
- Inside the Network Watcher resource blade, under Network diagnostic tools, select IP flow verify.
- In the settings page, add the following settings:
Resource group: Select a Resource group
Virtual machine: Select a Virtual machine
Network interface: This will be filled in automatically after selecting the VM.
Protocol: TCP.
Direction: Outbound.
Local IP address: This is filled in automatically as well.
Local port: 60000.
Remote IP address: 13.107.21.200 (address of Bing).
Remote port: 80. - Click the Check button
- The request is executed and the result it will return will be that access is allowed, because of the AllowInternetOutBound security rule, as shown in the following screenshot:
![]()
- Repeat the previous steps, but change the Remote IP address to 172.31.0.100. This will result in access being denied because of the DefaultOutboundDenyAll security rule:
![]()
- Lastly, repeat the step again, and this time make the following changes:
Direction: Inbound
Local port: 80
Remote port: 60000
This will result in the following:
![]()
