Azure virtual machine allows direct SMB access from the Internet
- CCPA ,
- ISO/IEC 27001 ,
- Microsoft Cloud Security Benchmark ,
- Mitre ATT&CK v12 ,
- New Zealand Information Security Manual ,
- NIST 800-53 ,
- Orca Best Practices ,
- UK Cyber Essentials
DescriptionServer Message Block (SMB) is a communication protocol intended to provide shared access to files on a network of systems. The SMB port (445) is open on your virtual machine and allows all incoming traffic from the Internet. In order to keep security best practices, you should restrict access to be only from allowed IP addresses.
Configure networking rule to allow incoming SMB traffic from allowed IP addresses only.