💼 7.11 Ensure 'Default outbound access' is Set to 'Disabled' for Virtual Network Subnets (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/07/11
Stats
not available
Description
Virtual machines without an explicit outbound method reach public endpoints through default outbound access, a Microsoft-owned public IP address, unless their subnet is private. The subnet's Default outbound access setting is Enabled or Disabled (private); delegated subnets and the subnets reserved for gateways, Azure Firewall, Route Server, and Bastion are out of scope. Prerequisites: Give each virtual machine that needs public endpoints an explicit outbound method, such as a NAT gateway, before disabling default outbound access.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Network Subnet default outbound access is not disabled🟢⚪ | 🟢 x2, ⚪ x1 | no data |