You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This article provides answers to some of the frequently asked questions asked about Azure Network Watcher.
@@ -35,8 +35,8 @@ sections:
35
35
* [Packet capture](./network-watcher-packet-capture-overview.md) enables you to capture your virtual machine traffic.
36
36
* [VPN troubleshoot](./network-watcher-troubleshoot-overview.md) runs multiple diagnostics checks on your VPN gateways and connections to help debug issues.
37
37
* Traffic
38
-
* [NSG flow logs](./network-watcher-nsg-flow-logging-overview.md) and [VNet flow logs (preview)](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
39
-
* [Traffic analytics](./traffic-analytics.md) processes your NSG flow log data enabling you to visualize, query, analyze, and understand your network traffic.
38
+
* [Network security group flow logs](./network-watcher-nsg-flow-logging-overview.md) and [virtual network flow logs](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
39
+
* [Traffic analytics](./traffic-analytics.md) processes your network security group flow log data enabling you to visualize, query, analyze, and understand your network traffic.
40
40
41
41
For more detailed information, see [Network Watcher overview](./network-watcher-overview.md).
42
42
@@ -88,7 +88,7 @@ sections:
88
88
- question: |
89
89
What is the NetworkWatcherRG?
90
90
answer: |
91
-
NetworkWatcherRG is a resource group that's automatically created for Network Watcher resources. For example, Network Watcher regional instances and the NSG flow log resources are created in **NetworkWatcherRG** resource group. You can customize the name of Network Watcher resource group using [PowerShell](network-watcher-create.md?tabs=powershell#enable-network-watcher-for-your-region), [Azure CLI](network-watcher-create.md?tabs=cli#enable-network-watcher-for-your-region), or [REST API](/rest/api/network-watcher/network-watchers/create-or-update).
91
+
NetworkWatcherRG is a resource group that's automatically created for Network Watcher resources. For example, Network Watcher regional instances and the network security group flow log resources are created in **NetworkWatcherRG** resource group. You can customize the name of Network Watcher resource group using [PowerShell](network-watcher-create.md?tabs=powershell#enable-network-watcher-for-your-region), [Azure CLI](network-watcher-create.md?tabs=cli#enable-network-watcher-for-your-region), or [REST API](/rest/api/network-watcher/network-watchers/create-or-update).
92
92
93
93
- question: |
94
94
Does Network Watcher store customer data?
@@ -188,17 +188,17 @@ sections:
188
188
- question: |
189
189
What is the difference between NSG flow logs and NSG diagnostics?
190
190
answer: |
191
-
NSG flow logs log traffic flowing through a network security group. On the other hand, NSG diagnostics returns all network security groups that your traffic is traversing and the rules of each network security group that are applied to this traffic. Use NSG diagnostics to verify that your network security group rules are being applied as expected.
191
+
Network security group flow logs log traffic flowing through a network security group. On the other hand, NSG diagnostics returns all network security groups that your traffic is traversing and the rules of each network security group that are applied to this traffic. Use NSG diagnostics to verify that your network security group rules are being applied as expected.
192
192
193
193
- question: |
194
-
Can I log ESP and AH traffic using NSG flow logs?
194
+
Can I log ESP and AH traffic using network security group flow logs?
195
195
answer: |
196
-
No, NSG flow logs don't support ESP and AH protocols.
196
+
No, network security group flow logs don't support ESP and AH protocols.
197
197
198
198
- question: |
199
199
Can I log ICMP traffic using flow logs?
200
200
answer: |
201
-
No, NSG flow logs and VNet flow logs don't support ICMP protocol.
201
+
No, network security group flow logs and virtual network flow logs don't support ICMP protocol.
202
202
203
203
- question: |
204
204
Can I delete a network security group that has flow logging enabled?
@@ -216,14 +216,14 @@ sections:
216
216
Yes, you can use a storage account from a different subscription as long as this subscription is in the same region of the network security group and associated with the same Microsoft Entra tenant of the network security group or virtual network's subscription.
217
217
218
218
- question: |
219
-
How do I use NSG flow logs with a storage account behind a firewall?
219
+
How do I use network security group flow logs with a storage account behind a firewall?
220
220
answer: |
221
221
To use a storage account behind a firewall, you have to provide an exception for Trusted Microsoft Services to access your storage account:
222
222
223
223
1. Go to the storage account by entering the storage account's name in the search box at the top of the portal.
224
224
2. Under the **Security + networking**, select **Networking**, then select **Firewalls and virtual networks**.
225
225
3. In **Public network access**, select **Enabled from selected virtual networks and IP addresses**. Then under **Exceptions**, check the box next to **Allow Azure services on the trusted services list to access this storage account.**
226
-
4. Enable NSG flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
226
+
4. Enable network security group flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
227
227
228
228
You can check the storage logs after a few minutes. You should see an updated TimeStamp or a new JSON file created.
229
229
@@ -233,32 +233,32 @@ sections:
233
233
Network Watcher has a built-in fallback mechanism that it uses when connecting to a storage account behind a firewall (firewall enabled). It tries to connect to the storage account using a key, and if that fails, it switches to a token. In this case, a 403 error is logged in the storage account activity log.
234
234
235
235
- question: |
236
-
Can Network Watcher send NSG flow logs data to a storage account enabled with Private Endpoint?
236
+
Can Network Watcher send network security group flow logs data to a storage account enabled with Private Endpoint?
237
237
answer: |
238
-
Yes, Network Watcher supports sending NSG flow logs data to a storage account enabled with a private endpoint.
238
+
Yes, Network Watcher supports sending network security group flow logs data to a storage account enabled with a private endpoint.
239
239
240
240
- question: |
241
-
How do I use NSG flow logs with a storage account behind a Service Endpoint?
241
+
How do I use network security group flow logs with a storage account behind a Service Endpoint?
242
242
answer: |
243
-
NSG flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
243
+
Network security group flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
244
244
245
245
- question: |
246
246
What is the difference between flow logs versions 1 and 2?
247
247
answer: |
248
-
Flow logs version 2 introduces the concept of *flow state* and stores information about bytes and packets transmitted. For more information, see [NSG flow log format](./network-watcher-nsg-flow-logging-overview.md#log-format).
248
+
Flow logs version 2 introduces the concept of *flow state* and stores information about bytes and packets transmitted. For more information, see [Network security group flow log format](./network-watcher-nsg-flow-logging-overview.md#log-format).
249
249
250
250
- question: |
251
251
Can I create a flow log for a network security group that has a read-only lock?
252
252
answer: |
253
-
No, a **read-only** lock on a network security group prevents the creation of the corresponding NSG flow log.
253
+
No, a **read-only** lock on a network security group prevents the creation of the corresponding network security group flow log.
254
254
255
255
- question: |
256
256
Can I create a flow log for a network security group that has a cannot-delete lock?
257
257
answer: |
258
-
Yes, a **cannot-delete** lock on the network security group doesn't prevent the creation or modification of the corresponding NSG flow log.
258
+
Yes, a **cannot-delete** lock on the network security group doesn't prevent the creation or modification of the corresponding network security group flow log.
259
259
260
260
- question: |
261
-
Can I automate NSG flow logs?
261
+
Can I automate network security group flow logs?
262
262
answer: |
263
-
Yes, you can automate NSG flow logs via Azure Resource Manager templates (ARM templates). For more information, see [Configure NSG flow logs using an Azure Resource Manager (ARM) template](quickstart-configure-network-security-group-flow-logs-from-arm-template.md).
263
+
Yes, you can automate network security group flow logs via Azure Resource Manager templates (ARM templates). For more information, see [Configure NSG flow logs using an Azure Resource Manager (ARM) template](quickstart-configure-network-security-group-flow-logs-from-arm-template.md).
Copy file name to clipboardExpand all lines: articles/network-watcher/index.yml
+7-7Lines changed: 7 additions & 7 deletions
Original file line number
Diff line number
Diff line change
@@ -1,15 +1,15 @@
1
1
### YamlMime:Landing
2
2
3
3
title: Network Watcher documentation
4
-
summary: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and NSG flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
4
+
summary: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
5
5
metadata:
6
6
title: Network Watcher Documentation
7
-
description: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and NSG flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
7
+
description: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
0 commit comments