Attach a Server or NIC to a Network Security Group
With NSGs, administrators can control and filter incoming and outgoing traffic to virtual resources. NSG rules only permit traffic and support security rules that allow traffic in both inbound and outbound directions. Any traffic not explicitly allowed is automatically blocked. When you attach NSGs to servers or Network Interface Cards (NICs), you can enforce granular security policies by restricting access to specific servers or NICs to secure your network from malicious activity, unauthorized access, and security threats.
Reviewing your configuration is vital to ensure it meets changing security requirements.
Warning: It is not recommended to use NSGs in parallel with NIC-based firewalls. By default, NSGs act as bidirectional firewalls, which can override or conflict with the behavior of NIC-based firewalls and lead to unintended traffic rules.
Attach a Server or NIC to an NSG via the Network Security Groups window
To attach NSGs to a server or NIC, follow these steps:
1. In the DCD, go to Menu > Security > Network Security Groups.
2. Select the checkbox(es) to associate the chosen NSGs with a server or an NIC.
3. Select Attach NSG to.

4. Select one of the following in the Attach Network Security Groups pop-up window:
Select the target VM or NIC:
Server: Select a server from the drop-down list. The list contains the servers that you have configured in the respective data center. Upon selection, the chosen NSGs are automatically configured for all the NICs associated with the corresponding server.
NIC: Select an NIC from the drop-down list. The list contains the NICs associated with the respective data center. The selected NSGs are associated with the selected NIC upon selection. This is beneficial for granular control, where you can apply NSGs to individual VMs or NICs requiring unique security configurations.
What action should be taken with the selected Network Security Groups?
Add selected security groups without affecting any existing ones: Select the option to add the selected NSGs without affecting the existing NSGs.
Replace any existing security groups with the selected ones: Select the option to replace the existing NSGs with the selected NSGs. All the rules of the chosen server or the NIC will be overridden with the rules of the new NSGs.

Result: The selected security group(s) is associated with the selected server or the NIC.
Attach a Server or NIC to an NSG from the Inspector pane
To attach a server or NIC from the Inspector pane, follow these steps:
1. In the DCD, go to Menu > Virtual Data Centers and select the data center from My Virtual Data Centers.
2. Depending on whether you want to attach a server or NIC to an NSG, perform the following action:
1. In the Inspector pane, select the data center and go to the Settings tab.
2. In the Network Security Groups, select one or more network security groups from the drop-down list. You can choose from any of the default or custom groups.

3. Provision your changes.
Result: The selected security group(s) is associated with the selected server or the NIC.
Last updated
Was this helpful?