Description

By default, Service Bus namespaces are accessible from internet as long as the request comes with valid authentication and authorization. If public access is required, you still can restrict access to Service Bus using Firewall/Virtual networks rules. Specify at least one IP firewall rule or virtual network rule for the namespace to allow traffic only from the specified IP addresses or subnet of a virtual network. If there are no IP and virtual network rules, the namespace can be accessed over the public internet (using the access key).

• 

  Recommended Mitigation

  It is recommended to add at least one Firewall/Virtual network rule to your {AzureServiceBus} Service Bus.