Edit

Troubleshoot network security group configuration problems

Summary

This article describes common Azure Bastion network security group (NSG) configuration problems and how to fix them.

Common problems and resolutions

Problem Description Resolution
Unable to create an NSG on AzureBastionSubnet When you try to create an NSG on the Azure Bastion subnet, you get the following error: 'Network security group <NSG name> doesn't have necessary rules for Azure Bastion Subnet AzureBastionSubnet". If you create and apply an NSG to AzureBastionSubnet, make sure you add the required rules to the NSG. For a list of required rules, see Working with NSG access and Azure Bastion. If you don't add these rules, the NSG creation or update fails.

For an example of the NSG rules, see the quickstart template. For more information, see NSG guidance for Azure Bastion.

Resources