Remediation

Where SSH is not explicitly required and narrowly configured for resources attached to the Network Security Group, Internet-level access to your Azure resources should be restricted or eliminated.

For internal access to relevant resources, configure an encrypted network tunnel such as:

• ExpressRoute.
• Site-to-site VPN.
• Point-to-site VPN.