Network security perimeter

azure Firewallazure-network-security-perimeter

Logical boundary around PaaS resources that denies public traffic unless an access rule allows it.

Provider: azure
Kind: Firewall
Category: Security
Official docs: https://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-concepts
Also known as: NSP

Properties · 2 set by this component

property	type	values	required	kind default	this component
accessMode · component property	enum	transition \| enforced	no	transition	inherited
defaultAction	enum	allow \| deny	no	—	▸ deny
intraPerimeterTrafficAllowed · component property	boolean	—	no	true	inherited
intrusionPrevention	boolean	—	no	—	inherited
logging	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ true
maxAssociatedResources · component property	integer	—	no	1000	inherited
maxRuleElementsPerDirection · component property	integer	—	no	200	inherited
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "network-security-perimeter", component: "azure-network-security-perimeter" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Network security perimeter: a logical boundary around PaaS resources that sit outside a virtual network
3# ("What is a network security perimeter?"). That page states the perimeter restricts public access to the
4# resources inside it by default, that transition mode (formerly learning mode) is the default access mode
5# and enforced mode must be set by an administrator, that in enforced mode all traffic except intra-perimeter
6# traffic is denied unless an allow rule exists, and that a profile takes at most 200 rule elements in each
7# direction with up to 1,000 associated resources per perimeter.
8schemaVersion: "1"
9type: "component"
10id: "azure-network-security-perimeter"
11kind: "firewall"
12provider: "azure"
13docs: "https://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-concepts"
14aliases: ["NSP"]
15defaults:
16  managed: true
17  defaultAction: "deny"
18properties:
19  accessMode:
20    type: "enum"
21    values: ["transition", "enforced"]
22    default: "transition"
23  intraPerimeterTrafficAllowed:
24    type: "boolean"
25    default: true
26  maxRuleElementsPerDirection:
27    type: "integer"
28    default: 200
29  maxAssociatedResources:
30    type: "integer"
31    default: 1000

The same page as markdown, for an agent: /catalogue/components/azure-network-security-perimeter.md