Problem with network security group (NSG) rules in case of VNet injection

[Alx]

Hi everyone,

Our internal company security policy for the Cloud infrastructure requires to have custom outbound NSG rule that denies all traffic. The rules attributes should be as follows:

Priority: 4096

Port: Any

Protocol: Any

Source: Any

Destination: Any

Action: Deny

After creation of this rule Databricks cluster stops working - jobs are not submitted and the cell in the notebook constantly shows "Running command..."

Changing Destination to Internet does not help either.

Looks like in addition to this restriction rule some explicit permissive rules should be created.

Could you please recommend which configurations for this rules should be done or point into the manuals if such exist.

[Kaniz]

Hi @Alexey Tyulyaev​ ! My name is Kaniz, and I'm the technical moderator here. Great to meet you, and thanks for your question! Let's see if your peers in the community have an answer to your question first. Or else I will get back to you soon. Thanks.

[Kaniz · Accepted solution]

Hi @Alexey Tyulyaev​ , Please go through these docs:-

• https://docs.microsoft.com/en-us/azure/databricks/administration-guide/cloud-configurations/azure/vn...
• https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

[Atanu]

HELLO @Alexey Tyulyaev​  please check https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group