# Azure NSG Open to Internet | ZopNight

> The rule admits traffic from any address, so everything behind it is exposed to the internet whatever the application's own controls do.

Source: https://zop.dev/zopnight/rules/azure-nsg-open-to-internet

---

_Compliance · Critical severity_

## Azure NSG Open to Internet

The rule admits traffic from any address, so everything behind it is exposed to the internet whatever the application's own controls do.

- Azure — provider
- Critical — severity
- Compliance — where it shows up
- Manual — fix, steps written out

Free to start. No card. The playground just needs your work email.

## Found, explained, handed over.

Where the estate departs from your policies, frameworks and tagging rules.

- 01. Detect — ZopNight checks this automatically across Azure, with read-only access to the account.
- 02. Explain — Every finding says exactly what to change: Restrict unrestricted ingress on network security group.
- 03. Fix — The finding opens with the fix already written out, step by step, so it is one ticket, not an investigation.

- applies_to_fallback: Any resource in the account
- where_it_appears: The Compliance tab of Recommendations, with every affected resource listed.

## Related

- [Azure NSG Not Associated with Any Resource](https://zop.dev/zopnight/rules/azure-nsg-not-associated-with-any-resource)
- [ACM Certificate Expiring Soon](https://zop.dev/zopnight/rules/acm-certificate-expiring-soon)
- [AKS Cluster RBAC Not Enabled](https://zop.dev/zopnight/rules/aks-cluster-rbac-not-enabled)
- [GCP Cloud SQL Instance Has Public IP Enabled](https://zop.dev/zopnight/rules/gcp-cloud-sql-instance-has-public-ip-enabled)
- [GCP Firewall Rule Allows All Ports](https://zop.dev/zopnight/rules/gcp-firewall-rule-allows-all-ports)
- [GCP Firewall Rule Allows Internet Access to Sensitive Port](https://zop.dev/zopnight/rules/gcp-firewall-rule-allows-internet-access-to-sensitive-port)

## See the compliance findings in your account.

Connect a read-only role and the first pass runs on your own estate. This check, and the rest of the catalogue, with it.

[object Object]