Merge pull request #224597 from halkazwini/nw-nsg-diag

Network Watcher: Freshness: Introduction to NSG Diagnostics in Azure Network Watcher

Author: v-regandowner

articles/network-watcher/network-watcher-network-configuration-diagnostics-overview.md

@@ -1,35 +1,34 @@
 ---
-title: Introduction to Network Configuration Diagnostics in Azure Network Watcher | Microsoft Docs
-description: This page provides an overview of the Network Watcher - NSG Diagnostics
+title: Introduction to NSG Diagnostics in Azure Network Watcher
+description: Learn about Network Security Group (NSG) Diagnostics tool in Azure Network Watcher
 services: network-watcher
-documentationcenter: na
 author: halkazwini
 ms.service: network-watcher
-ms.topic: article
-ms.tgt_pltfrm: na
-ms.workload:  infrastructure-services
-ms.date: 01/04/2023
-ms.custom: engagement-fy23
 ms.author: halkazwini
+ms.reviewer: shijaiswal
+ms.topic: conceptual
+ms.workload: infrastructure-services
+ms.date: 01/20/2023
+ms.custom: template-concept, engagement-fy23
 ---
 
 # Introduction to NSG Diagnostics in Azure Network Watcher
 
-The NSG Diagnostics tool helps customers understand which traffic flows will be allowed or denied in your Azure Virtual Network along with detailed information for debugging. It can help you in understanding if your NSG rules are configured correctly. 
+The Network Security Group (NSG) Diagnostics is an Azure Network Watcher tool that helps you understand which network traffic is allowed or denied in your Azure Virtual Network along with detailed information for debugging. It can help you in understanding if your NSG rules are configured correctly. 
 
-## Pre-requisites
-For using NSG Diagnostics, Network Watcher must be enabled in your subscription. See [Create an Azure Network Watcher instance](./network-watcher-create.md) to enable.
+> [!NOTE]
+> To use NSG Diagnostics, Network Watcher must be enabled in your subscription. See [Create an Azure Network Watcher instance](./network-watcher-create.md) to enable.
 
 ## Background
 
-- Your resources in Azure are connected via Virtual Networks (VNETs) and subnets. The security of these VNets and subnets can be managed using a Network Security Group (NSG).
-- An NSG contains a list of security rules that allow or deny network traffic to resources it is connected to. NSGs can be associated with subnets, individual VMs, or individual network interfaces (NICs) attached to VMs. 
+- Your resources in Azure are connected via [virtual networks (VNets)](../virtual-network/virtual-networks-overview.md) and subnets. The security of these VNets and subnets can be managed using [network security groups (NSGs)](../virtual-network/network-security-groups-overview.md).
+- An NSG contains a list of [security rules](../virtual-network/network-security-groups-overview.md#security-rules) that allow or deny network traffic to resources it's connected to. An NSG can be associated to a virtual network subnet or individual network interface (NIC) attached to a virtual machine (VM). 
 - All traffic flows in your network are evaluated using the rules in the applicable NSG.
-- Rules are evaluated based on priority number from lowest to highest 
+- Rules are evaluated based on priority number from lowest to highest.
 
 ## How does NSG Diagnostics work? 
 
-For a given flow, the NSG Diagnostics tool runs a simulation of the flow and returns whether the flow would be allowed (or denied) and detailed information about rules allowing/denying the flow.  Customers must provide details of a flow like source, destination, protocol, etc. The tool returns whether traffic was allowed or denied, the NSG rules that were evaluated for the specified flow and the evaluation results for every rule.
+For a given flow, after you provide details like source and destination, the NSG Diagnostics tool runs a simulation of the flow and returns whether the flow would be allowed or denied with detailed information about the security rule allowing or denying the flow.
 
 ## Next steps
 

articles/network-watcher/toc.yml

@@ -51,7 +51,7 @@
     href: connection-monitor-schema.md
   - name: Diagnose VM network traffic filter problems
     href: network-watcher-ip-flow-verify-overview.md
-  - name: Diagnose NSG rules and Traffic filtering
+  - name: NSG Diagnostics
     href: network-watcher-network-configuration-diagnostics-overview.md
   - name: Diagnose VM routing problems
     href: network-watcher-next-hop-overview.md