| 💼 7.1 Inbound Port Traffic Filters | 6 | | 12 | | no data |
| 　💼 7.1.1 Ensure that RDP Access from the Internet is Evaluated and Restricted (Automated)🔴 | | | 3 | 🔴 | no data |
| 　💼 7.1.2 Ensure that WinRM Access from the Internet is Evaluated and Restricted (Automated) | | | 1 | | no data |
| 　💼 7.1.3 Ensure that HTTP(S) access from the Internet is evaluated and restricted (Automated)🔴 | | | 3 | 🔴 | no data |
| 　💼 7.1.4 Ensure that UDP Port Access from the Internet is Evaluated and Restricted (Automated) | | | 1 | | no data |
| 　💼 7.1.5 Ensure that SSH Access from the Internet is Evaluated and Restricted (Automated)🔴 | | | 3 | 🔴 | no data |
| 　💼 7.1.6 Ensure that Database Port Access from the Internet is Evaluated and Restricted (Automated) | | | 1 | | no data |
| 💼 7.2 Azure Application Gateway | 6 | | 6 | | no data |
| 　💼 7.2.1 Ensure 'HTTP2' is Set to 'Enabled' on Azure Application Gateway (Automated) | | | 1 | | no data |
| 　💼 7.2.2 Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_2' or Higher on Azure Application Gateway (Automated) | | | 1 | | no data |
| 　💼 7.2.3 Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_3' on Azure Application Gateway (Automated) | | | 1 | | no data |
| 　💼 7.2.4 Ensure Bot Protection is Enabled in Azure Web Application Firewall Policy on Azure Application Gateway (Automated) | | | 1 | | no data |
| 　💼 7.2.5 Ensure Request Body Inspection is Enabled in Azure Web Application Firewall policy on Azure Application Gateway (Automated) | | | 1 | | no data |
| 　💼 7.2.6 Ensure Azure Web Application Firewall (WAF) is Enabled on Azure Application Gateway (Automated) | | | 1 | | no data |
| 💼 7.3 Ensure that Public IP Addresses are Evaluated on a Periodic Basis (Manual) | | | 1 | | no data |
| 💼 7.4 Ensure Subnets Are Associated with Network Security Groups (Automated) | | | 1 | | no data |
| 💼 7.5 Ensure that Network Watcher is 'Enabled' for Azure Regions That are in Use (Automated) | | | 1 | | no data |
| 💼 7.6 Ensure that Virtual Network Flow Log Retention Days is Set to Greater than or Equal to 90 (Automated) | | | 1 | | no data |
| 💼 7.7 Ensure 'Authentication type' is Set to 'Microsoft Entra ID' Only for Azure VPN Gateway Point-to-Site Configuration (Automated) | | | 1 | | no data |
| 💼 7.8 Ensure that Network Security Groups override the default 'VirtualNetwork' allow rules (Automated) | | | 1 | | no data |
| 💼 7.9 Ensure Azure Network Security Perimeter is Used to Secure Azure Platform-as-a-service Resources (Manual) | | | 1 | | no data |
| 💼 7.10 Ensure Azure Web Application Firewall (WAF) is Enabled on Azure Front Door (Automated) | | | 1 | | no data |
| 💼 7.11 Ensure 'Default outbound access' is Set to 'Disabled' for Virtual Network Subnets (Automated) | | | 1 | | no data |
| 💼 7.12 Ensure that Network Security Group Flow Log Retention Days is Set to Greater than or equal to 90 (LEGACY) (Automated) | | | 1 | | no data |