Network misconfigurations

Azure Network Security Group allows unrestricted access to HTTPS port from the Internet



Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It uses cryptography for secure communication over a computer network, and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). There is a rule configured in {AzureNetworkSecurityGroup} network security group, that allows all incoming traffic to this port from the Internet. In order to keep security best practices and decrease the risk for malicious activities, you should restrict access to be only from allowed IP addresses.