You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This article provides answers to the most frequently asked questions about Azure Network Watcher.
@@ -35,7 +35,7 @@ sections:
35
35
* [Packet capture](network-watcher-packet-capture-overview.md) enables you to capture your virtual machine traffic.
36
36
* [VPN troubleshoot](network-watcher-troubleshoot-overview.md) runs multiple diagnostics checks on your VPN gateways and connections to help debug issues.
37
37
* Traffic
38
-
* [Network security group flow logs](network-watcher-nsg-flow-logging-overview.md) and [virtual network flow logs](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
38
+
* [Virtual network flow logs](vnet-flow-logs-overview.md) and [network security group flow logs](network-watcher-nsg-flow-logging-overview.md) allow you to log network traffic passing through your virtual networks and network security groups (NSGs) respectively.
39
39
* [Traffic analytics](traffic-analytics.md) processes your network security group flow log data enabling you to visualize, query, analyze, and understand your network traffic.
40
40
41
41
For more detailed information, see [Network Watcher overview](network-watcher-overview.md).
@@ -223,14 +223,14 @@ sections:
223
223
Yes, you can use a storage account from a different subscription as long as this subscription is in the same region of the network security group and associated with the same Microsoft Entra tenant of the network security group or virtual network's subscription.
224
224
225
225
- question: |
226
-
How do I use network security group flow logs with a storage account behind a firewall?
226
+
How do I use flow logs with a storage account behind a firewall?
227
227
answer: |
228
228
To use a storage account behind a firewall, you have to provide an exception for Trusted Microsoft Services to access your storage account:
229
229
230
230
1. Go to the storage account by entering the storage account's name in the search box at the top of the portal.
231
231
2. Under the **Security + networking**, select **Networking**, then select **Firewalls and virtual networks**.
232
232
3. In **Public network access**, select **Enabled from selected virtual networks and IP addresses**. Then under **Exceptions**, check the box next to **Allow Azure services on the trusted services list to access this storage account.**
233
-
4. Enable network security group flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
233
+
4. Enable flow logs by creating a flow log for your target resource using the storage account. For more information, see [Create a flow log](vnet-flow-logs-manage#create-a-flow-log).
234
234
235
235
You can check the storage logs after a few minutes. You should see an updated TimeStamp or a new JSON file created.
236
236
@@ -240,14 +240,14 @@ sections:
240
240
Network Watcher has a built-in fallback mechanism that it uses when connecting to a storage account behind a firewall (firewall enabled). It tries to connect to the storage account using a key, and if that fails, it switches to a token. In this case, a 403 error is logged in the storage account activity log.
241
241
242
242
- question: |
243
-
Can Network Watcher send network security group flow logs data to a storage account enabled with Private Endpoint?
243
+
Can Network Watcher send flow logs data to a storage account enabled with Private Endpoint?
244
244
answer: |
245
-
Yes, Network Watcher supports sending network security group flow logs data to a storage account enabled with a private endpoint.
245
+
Yes, Network Watcher supports sending flow logs data to a storage account enabled with a private endpoint.
246
246
247
247
- question: |
248
-
How do I use network security group flow logs with a storage account behind a Service Endpoint?
248
+
How do I use flow logs with a storage account behind a service endpoint?
249
249
answer: |
250
-
Network security group flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
250
+
Flow logs are compatible with service endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
251
251
252
252
- question: |
253
253
What is the difference between flow logs versions 1 and 2?
0 commit comments