No Network Watcher

Risk Level: Low

Description: 

This plugin guarantees Network Watcher is set up correctly. Network Watcher aids with the discovery, diagnosis, and analysis of Azure networks. By enabling Network Watcher in every location, you can ensure that no resources are being used in places where they aren't supposed to be.

PingSafe strongly recommends enabling the Network Watcher service in all locations.

About the Service :

In an Azure virtual network, a network security group may be used to restrict network traffic to and from Azure resources. A network security group is a collection of security rules that allow or disallow incoming and outgoing network traffic to and from various Azure services. Source and destination, port, and protocol can all be specified for each rule.

Impact : 

By enabling Network Watcher in every location, you can ensure that no resources are being used in places where they aren't supposed to be.

Steps to reproduce :

1. Sign in to your Azure portal with your Azure account.
   https://portal.azure.com/#home 
   
2. Navigate to Azure’s Network Watcher.
   
3. We can clearly see that there are no Network Watchers.
4. Follow the same steps for other accounts as well.

Steps for remediation :

1. Sign in to your Azure portal with your Azure account.
   https://portal.azure.com/#home 
   
2. Navigate to Azure’s Network Watcher.
   
3. We can clearly see that there are no Network Watchers.
4. Next, click on Add and then add the region and click Add.
   
5. Now we have a Network watcher enabled for the region we selected.
   
6. Follow the same steps for other Network Watchers as well.

References :

• https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview 

Please feel free to reach out to support@pingsafe.com with any questions that you may have.

Thanks

PingSafe Support