---
names:
  full: "Azure Network Security Group allows public access to SSH port"
  contextual: "Security Group allows public access to SSH port"
description: >
  Ensure that Azure Network Security Groups do not allow unrestricted public SSH (port 22) traffic.
type: COMPLIANCE_POLICY
categories:
  - SECURITY
frameworkMappings:
  - "/frameworks/cis-azure-v6.0.0/07/02"
  - "/frameworks/iso-iec-27001-2013/13/01/01"
  - "/frameworks/iso-iec-27001-2022/05/14"
  - "/frameworks/pci-dss-v4.0.1/01/04/01"
  - "/frameworks/soc-2/cc6/01/08"
  - "/frameworks/soc-2/cc6/06/04"
  - "/frameworks/cloudaware/resource-security/network-exposure"
  - "/frameworks/hipaa-security-rules/164-312/e-01"
  - "/frameworks/iso-iec-27001-2013/09/01/02"
  - "/frameworks/pci-dss-v4.0.1/01/02/05"
  - "/frameworks/pci-dss-v4.0.1/01/02/06"
  - "/frameworks/pci-dss-v4.0.1/01/03/01"
  - "/frameworks/pci-dss-v4.0.1/01/03/02"
  - "/frameworks/pci-dss-v4.0.1/02/02/07"
  - "/frameworks/soc-2/cc6/01/03"
similarPolicies:
  internal:
    - dec-x-599c86b4
  cloudConformity:
    - url: https://www.trendmicro.com/cloudoneconformity/knowledge-base/azure/Network/unrestricted-ssh-access.html
      name: Check for Unrestricted SSH Access