Azure Tutorial: Securing a Dedicated SFTP Subnet with Network Security Groups

A hands-on Azure walkthrough demonstrates how to add structured network security to an existing virtual network built in a prior exercise. The guide covers creating a dedicated subnet called ftpSubnet within the guided-project-vnet, intended solely for SFTP traffic. A network security group named ftpNSG is then configured with an inbound rule permitting only TCP traffic on port 22, the standard port used by SFTP. The NSG is subsequently linked to ftpSubnet, enforcing those access restrictions at the subnet level. Together, these steps ensure the subnet accepts only its intended traffic, closing off unauthorized access to the network segment.