azure-network-ops

You can audit Azure network security groups and VNets across multiple subscriptions by running read-only queries that retrieve NSG rules, effective security rules, and VNet peering configurations to identify misconfigurations and build an accurate topology.

Checking ExpressRoute and VPN gateway health involves inspecting gateway status and load balancer health to ensure hybrid connectivity reliability. This process retrieves operational status across subscriptions to validate network performance and connectivity.

Yes, you can enumerate Azure network topologies including subnets, DNS, and route tables. Network discovery retrieves VNet configurations to build an accurate topology map for governance and troubleshooting across resource groups.

Yes, this Azure network audit approach supports read-only governance and GAIT-logged audit trails. All tool calls are logged, satisfying compliance requirements for multi-subscription queries and security reviews without modifying configurations.

Identifying NSG misconfigurations during an Azure network security review requires retrieving NSG rules and effective security rules. This process evaluates compliance status across VNets to pinpoint security posture gaps and misconfigurations.

Read-only Azure network audits for hybrid connectivity are limited to inspecting and querying configurations. They cannot modify ExpressRoute, VPN gateway, or NSG settings, meaning remediation of discovered misconfigurations requires separate administrative actions.