Convert Custom Network Security Group to Default

Default NSGs provide a standardized set of security rules and automatically add every newly provisioned VMs as a member, making it easier to maintain and scale your network security as your organization grows. It also reduces administrative overhead by eliminating the need to configure and update security rules manually.

**Prerequisites:** Ensure that you have appropriate permissions to create NSGs. Only contract administrators, owners, and users with permissions to the corresponding VDC can create and manage NSGs.

**Note:** * Only one security group can be a default group at a time. * A default security group is created with the four default rules. However, the rules are not created when you convert an existing custom NSG to a default NSG. For more information, see [FAQs](../nsg-faqs.md#what-predefined-rules-does-a-default-network-security-group-contain).

Convert from custom to default

To convert a custom NSG to a default NSG, follow these steps:

1. In the DCD, go to Menu > Security > Network Security Groups.

2. Select a data center from the drop-down list.

3. Select an NSG and click Set as default in the Network Security Groups window to convert the respective custom group to default.

Set as default

• Alternatively, on the Network Security Groups window, you can select the NAME of the respective security group or select View & Edit for the respective security group:

Alternative options

• Next, select Set as default in the Security Group Details window.

Set as default

4. Select Confirm in the pop-up window.

Result: The selected NSG is converted to the default group.

The group is set to Default

Revert from default to custom

1. Select Remove default status in the View & Edit Group window to remove the default status.

The Default NSG is converted to Custom

2. Select Confirm to confirm the status change.