--- title: Security mechanisms in Azure description: In this blog, the author has listed the various security mechanisms present in Microsoft Azure. image: https://blog.e-zest.com/hubfs/blog-files/endpoint_collection.png --- [![e-Zest logo\_An accion lab company\_Colour](https://blog.e-zest.com/hubfs/images/Logos%20with%20Tagline/Corporate/SVG/e-Zest%20logo_An%20accion%20lab%20company_Colour.svg "e-Zest logo_An accion lab company_Colour")](https://www.e-zest.com/) - [WORK](https://www.e-zest.com/our-work) - [SERVICES](https://www.e-zest.com/our-services) - [Product Engineering](https://www.e-zest.com/digital-product-engineering-services) - [Enterprise Data Services](https://www.e-zest.com/enterprise-data-services) - [Digital Commerce](https://www.e-zest.com/digital-commerce-services) - [Digital Operations](https://www.e-zest.com/digital-operations) - [Digital Consulting](https://www.e-zest.com/digital-transformation-consulting-services) - [Digital Experience Design](https://www.e-zest.com/digital-experience-design) - [INSIGHTS](https://blog.e-zest.com/) - [CAREERS](https://www.e-zest.com/careers) - [ENTERPRISE DATA SERVICES](https://www.e-zest.com/enterprise-data-services) - [GENERATIVE AI](https://www.e-zest.com/generative-ai) - [Healthcare](https://healthcare.e-zest.com) - [Contact Us](https://www.e-zest.com/contact-us) - ![Elevating Product Engineering with AI and ML](https://blog.e-zest.com/hubfs/Elevating%20Product%20Engineering%20with%20AI%20and%20ML.jpg) [BLOGS](https://blog.e-zest.com) #### Elevating Product Engineering with AI and ML As technology evolves and customer choices broaden, there is an increasing ... [Read more](https://blog.e-zest.com/elevating-product-engineering-with-ai-and-ml) - ![e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024](https://blog.e-zest.com/hubfs/e-Zest%20%E2%80%93%20An%20Accion%20Labs%20Company%20-%20Gets%20Recognition%20as%20a%20Contender%20in%20the%20ISG%20Provider%20LensTM%20Study%20on%20Digital%20Engineering%20Services%202024.jpg) [NEWS](https://blog.e-zest.com/news) #### e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024 We are delighted to announce that e-Zest – An Accion Labs Company has been ... [Read more](https://blog.e-zest.com/news/e-zest-an-accion-labs-company-gets-recognition-as-a-contender-in-the-isg-provider-lens-study-on-digital-engineering-services-2024) - ![e-Zest Solutions supports Digital Pune Mission](https://blog.e-zest.com/hubfs/blog-files/Digital%20Literacy%20Bus%20e-Zest.png) [CSR](https://blog.e-zest.com/csr) #### e-Zest Solutions supports Digital Pune Mission **Pune, India:** e-Zest Solutions, a leading digital technology innovation ... [Read more](https://blog.e-zest.com/csr/e-zest-solutions-supports-digital-pune-mission) - [Work](https://www.e-zest.com/our-work) - [Services](https://www.e-zest.com/our-services) - [Insights](https://blog.e-zest.com) - [Careers](https://www.e-zest.com/careers) - [Enterprise Data](https://www.e-zest.com/enterprise-data-services) - [Generative AI](https://www.e-zest.com/generative-ai) - [Innovations](https://www.e-zest.com/innovations) - [Healthcare](https://healthcare.e-zest.com) - [About](https://www.e-zest.com/about-us) - [Contact](https://www.e-zest.com/contact-us) - [Blog](https://blog.e-zest.com/) - [News](https://blog.e-zest.com/news) - [CSR](https://blog.e-zest.com/csr) - [![Linkedin Icon](https://blog.e-zest.com/hubfs/icons/linkedin_icon_white.svg)](https://www.linkedin.com/company/e-zest-solutions/) - [![Twitter Icon](https://blog.e-zest.com/hubfs/twitter-logo-silhouette%20(5).svg)](https://twitter.com/ezest) - [![Facebook Icon](https://blog.e-zest.com/hubfs/facebook-app-logo%20(4).svg)](https://www.facebook.com/61259256638) - [![Instagram Icon](https://blog.e-zest.com/hubfs/instagram-logo%20(4).svg)](https://www.instagram.com/ezestsolutions/) - [![Youtube Icon](https://blog.e-zest.com/hubfs/icons/youtube_icon_white.svg)](https://www.youtube.com/user/ezestcorporate) [![Go to top icon](https://blog.e-zest.com/hubfs/AA%20Assets/top%20button.svg)](https://blog.e-zest.com/security-mechanisms-in-azure#top) Hit enter to search or ESC to close Insights e-Zest members share technology ideas to foster digital transformation. - [Blog](https://blog.e-zest.com) - [News](https://blog.e-zest.com/news) - [Podcasts](https://www.e-zest.com/podcasts) - [Healthcare](https://blog.e-zest.com/healthcare) - [CSR](https://blog.e-zest.com/csr) - [Whitepaper](https://blog.e-zest.com/whitepaper) - [Playbook](https://blog.e-zest.com/playbook) - [Media Kit](https://www.e-zest.com/media-kit) # Security mechanisms in Azure [Kunal Patil](https://blog.e-zest.com/author/kunal-patil) Dec 31, 2015 [Windows Azure](https://blog.e-zest.com/topic/windows-azure) [cloud computing](https://blog.e-zest.com/topic/cloud-computing-2) [Technology](https://blog.e-zest.com/topic/technology) - - - - AWS offers a security group for virtual machines/subnets. These security groups follow rules which allow/deny access to certain IPs and ports. Similarly, Azure also provides Azure Endpoints with Manage ACL (Access Control List). These endpoints allow/deny accessing VMs from desired IP addresses for certain ports. For example: For a VM, this image shows the endpoint collection ![endpoint\_collection.png](https://blog.e-zest.com/hubfs/blog-files/endpoint_collection.png "endpoint_collection.png")If you click Manage ACL, it gives you an IP list ![IP\_list.png](https://blog.e-zest.com/hubfs/blog-files/IP_list.png "IP_list.png") Here we can assign description name, action (permit or deny) and IP range. **Network security group for Azure Virtual Network:** Azure Virtual network is similar to Amazon VPC. It is subnet isolation from the network. You can use private IP addresses, subnets and access control policies. You can consider virtual networks like a private cloud. Azure also offers a Network Security Group (NSG). Applying ACLs to a Virtual Machine’s public endpoint controls the traffic to a certain port of a particular virtual Machine. But Network Security Groups allow you to control all inbound and outbound traffic of a Virtual Machine/Subnet. For Azure NSG operation, you will have to use PowerShell. Azure provides security to infrastructure by assigning Network Security Group to \-**VM**: This controls traffic to VM directly as per rules \-**Subnet**: This controls traffic to VMs residing in subnet directly \-**VM and Subnet**: This provides double protection. We can assign NSG to Subnet and another NSG to VM residing in. So, the traffic can be controlled twice securely. **Note**: Azure NSG rules/ACL rules work as per priority.        **Identity and Access management:** Azure provides Azure Active directory providing tenant management on same subscription. **Azure Active Directory**: For Azure Active Directory (AAD), access management can be decided by the global administrator. Global admin can grant user/global/billing/service/user/password admin types of privileges. This is very useful for access restriction and limitation. For security purposes, global admin/ service admin/ password admin can create, grant or block access to tenant users. **Azure RMS**: Azure right management service is another useful feature that works across multiple devices PCs, tablets and phones. To secure information like files and emails, it uses encryption, identity, and authorization policies. Information can be protected both within your organization and outside your organization because the protection remains with the data, even when it leaves your organization’s boundaries. With this feature, you can easily manage access to important sensitive files like reports. ![Azure.png](https://blog.e-zest.com/hubfs/blog-files/Azure.png "Azure.png")As a security and compliance approach, it is also certified by ISO/IEC 27001:2013, SOC 2 SSAE 16/ISAE 3402 attestations and HIPAA BAA among others. - - - ### Similar Blog [![Azure everywhere workshop by Microsoft and e-Zest](https://blog.e-zest.com/hubfs/Azure-workshop-image-1.png) Azure everywhere workshop by Microsoft and e-Zest Are you looking forward to discover how Microsoft Azure can help in scaling your business and provide flexibility by making your ... By Vikram Pendse Aug 12, 2016](https://blog.e-zest.com/azure-everywhere-workshop-by-microsoft-and-e-zest) [10 most common mistakes while managing Azure cloud The process of managing the Azure cloud can run smoother if enterprises or individuals avoid these 10 mistakes. By Vikram Pendse May 24, 2016](https://blog.e-zest.com/here-are-10-most-common-mistakes-while-managing-azure-cloud) [![Difference between Azure VM states - Stopped and Stopped (Deallocated)](https://blog.e-zest.com/hubfs/blog-files/Stopped.png) Difference between Azure VM states - Stopped and Stopped (Deallocated) By Kunal Patil Dec 09, 2015](https://blog.e-zest.com/difference-between-azure-vm-states-stopped-and-stopped-deallocated) [![Tutorial: Log management on Azure](https://blog.e-zest.com/hubfs/blog-files/logs_management.jpg) Tutorial: Log management on Azure Microsoft provides a useful service called Azure management service on the old Azure portal (manage.windowsazure.com). Under the ... By Kunal Patil Dec 02, 2015](https://blog.e-zest.com/tutorial-log-management-on-azure) [![Difference between Azure VM states - Stopped and Stopped (Deallocated)](https://blog.e-zest.com/hubfs/blog-files/Stopped.png) Difference between Azure VM states - Stopped and Stopped (Deallocated) By Kunal Patil Dec 09, 2015](https://blog.e-zest.com/difference-between-azure-vm-states-stopped-and-stopped-deallocated) [![Tutorial: Log management on Azure](https://blog.e-zest.com/hubfs/blog-files/logs_management.jpg) Tutorial: Log management on Azure Microsoft provides a useful service called Azure management service on the old Azure portal (manage.windowsazure.com). Under the ... By Kunal Patil Dec 02, 2015](https://blog.e-zest.com/tutorial-log-management-on-azure) [![Tagging in Microsoft Azure](https://blog.e-zest.com/hubfs/blog-files/Azure_resource_group.png) Tagging in Microsoft Azure If you are familiar with AWS tags, Azure tags will not seem alien to you. Tags are used to identify Azure resources. A tag has ... By Kunal Patil Nov 16, 2015](https://blog.e-zest.com/tagging-in-microsoft-azure) [![What is Azure StorSimple?](https://blog.e-zest.com/hs-fs/file-3419272216-jpg/blog-files/azure.jpg) What is Azure StorSimple? Azure StorSimple is a new way of keeping cloud data more secure and available. Before StorSimple, cloud users faced many ... By Kunal Patil Oct 21, 2015](https://blog.e-zest.com/what-is-azure-storsimple/) ## Helping Organizations Thrive in the Digital Age [Contact Us](https://www.e-zest.com/contact-us) - [About](https://www.e-zest.com/about-us) - [Services](https://www.e-zest.com/our-services) - [Work](https://www.e-zest.com/our-work) - [Insights](https://blog.e-zest.com/) - [Healthcare](https://healthcare.e-zest.com/) - [Accion Labs](https://www.accionlabs.com/) - - - - - - Dallas - Detroit - Hannover - Vienna - London - Pune © 2025 e-Zest Solutions - [Privacy Policy](https://www.e-zest.com/privacypolicy) - [Cookie Policy](https://www.e-zest.com/cookie-policy) Contact us Contact us e-Zest is a leading digital innovation partner for enterprises and technology companies that utilizes emerging technologies for creating engaging customers experiences. Being a customer-focused and technology-driven company, it always helps clients in crafting holistic business value for their software development efforts. It offers software development and consulting services for cloud computing, enterprise mobility, big data and analytics, user experience and digital commerce.