Lab
A Cloud Guru

Create an Application Security Group for Two Web Servers in Azure

Your company has prepared two web servers and they intend to start serving traffic to them soon. Both servers have IIS installed, but they don't have port 80 (HTTP) or 443 (HTTPS) open for internet traffic. You have been tasked with creating an application security group, associating it with a network security group, and ensuring that the servers are accessible from the internet.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

30m

Published

Oct 09, 2020

Challenge

Create a New Application Security Group
1. Once in the Azure portal, click on the menu in the upper-left and select Virtual Machine. Note the location of these machines, as you'll need that detail momentarily.
2. Head back to the main menu and select All Services. In the search bar, type application security groups and select that service. On the Application Security group page, click the Add button.
3. For the resource group section, click the drop-down menu and select the pre-existing resource group.
4. Under the instance details section, set the name field to asgWebServers. Ensure the region is set to the same region as your virtual machines (see step 1).
5. Click Review + create.
Challenge

Create a New Network Security Rule
1. Go to the Azure menu in the upper-left, select All Services, and search for nsg.
2. Go to Network Security groups and click on the existing security group.
3. Select Inbound security rules on the left, and click add.
4. For Destination, select Application Security group.
5. For Destination application security group, choose asgWebServers.
6. The Destination port ranges are set to 80,443.
7. Set Priority to 124.
8. Under Name, set to WebServers_Rule.
9. Finally, click the add button. You'll see this new rule amongst your list.
10. Head back to the Azure menu in the upper-left and select Virtual Machine.
11. Next, attach the application security group to the networking interface of each VM.
12. Select your first VM.
13. Click the Networking tab, and click Application security groups.
14. Select Configure the application security group, select aswWebServers from the drop-down, and press Save.
15. Repeat the last two steps for your second VM.
Challenge

Test Connectivity to the Web Servers
1. Click on the Overview tab on the left-hand side.
2. Copy the Public IP address and paste it into your browser (e.g., Chrome) using http. (If we had a certificate set up, the test would be the same for https).
3. If successful with the previous steps, you will see the default IIS splash page.
4. Feel free to put the other VM's IP in a browser to see its IIS splash page.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.