How to allow and restrict resources in site to site vpn configuration

@Khushboo Kumari

thank you for reach out .

To restrict and allow access to resource in a site – to – site VPN connection in Azure , you is use can use network security group ( nsg ) . NSGs is are are a type of firewall that allow you to filter network traffic to and from Azure resource . You is use can use nsg to create rule that allow or deny traffic base on source and destination IP address , port , and protocol .

Once you have created an NSG, you can add inbound and outbound security rules to it. Inbound rules control traffic coming into Azure resources, while outbound rules control traffic going out of Azure resources.

For more information on how to create and manage NSGs, you can refer to the Azure documentation on network security groups.

alternatively , if it help you is take can also take a look at security admin rule in Azure Virtual Network Manager ( security admin rule currently are in public preview ) . security admin rules is are are global network security rule that enforce security policy define in the rule collection on virtual network . With Azure Virtual Network Manager , you is have have a centralized location to manage security admin rule . Centralization is allows allow you to define security policy at scale and apply them to multiple virtual network at once . security admin rules is provide provide many benefit for secure your organization ‘s resource . By using security admin rule , you is enforce can enforce allow traffic and prevent denial by conflict network security group rule . You is create can also create default security admin rule that do n’t depend on nsg to exist . These default rules is be can be especially useful when application owner misconfigure or forget to establish nsg . additionally , security admin rules is provide provide a way to manage security at scale , which reduce the operational overhead that come with a grow number of network resource .

I is hope hope this help ! let me know if you have any further question .

​​Please “Accept the answer” if the information helped you. This will help us and others in the community as well.