Creating the Network Security Group(s) - NetCloud-Virtual-Edge-Deployment-Guide-Azure/Creating-the-Network-Security-Group-s

The following protocols and ports are required for Secure Connect to function:

One network security group may be created for each interface.

Complete the following steps to create a network security group and security rule for the WAN interface:

In the Azure portal, search for “network security groups” and select Network security groups from the Services list.
Note
Do not select Network security groups (classic).
Select Create.
Ensure that the subscription and region are correct.
Select the Resource group.
Enter a descriptive name for the network security group.
Select Review + create.
Select Create to save the new network security group.
Select Go to resource.
Select Inbound security rules, under Settings in the left-side navigation panel, and then select Add.
Enter 80, 443, 53, 8443 for the Destination port ranges.
Select the appropriate type of the protocol as mentioned previously.
Enter a descriptive name for the rule. Ericsson Enterprise Wireless recommends naming the rule based upon its function for usability and simplicity.
Select Add.

Repeat this procedure for an additional network security group or inbound or outbound security rules for the lan0 interface, if needed.