💼 6.1.1.5 Ensure that Network Security Group Flow Logs are Captured and Sent to Log Analytics (LEGACY) (Manual)
- ID:
/frameworks/cis-azure-v7.0.0/06/01/01/05
Stats
not available
Description
Existing network security group flow logs should stay enabled and send traffic analytics to a central Log Analytics workspace until they are migrated to virtual network flow logs. Where a subscription has no network security group flow logs, this recommendation is satisfied by Ensure that Virtual Network Flow Logs are Captured and Sent to Log Analytics. Warning: Network security group flow logs retire on September 30, 2027; new ones cannot be created after June 30, 2025, and Azure deletes the remaining flow log resources at retirement.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Legacy NSG Flow Logs are not sent to Log Analytics🟢⚪ | 🟢 x2, ⚪ x1 | no data |