thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Application Security Group (ASG)

Azure construct that groups VM network interfaces by role so NSG rules can reference workloads instead of IP addresses.

Definition

ASGs let administrators define rules such as allow WebServers to reach DbServers on port 1433 without maintaining IP lists. NICs are added to ASGs, and NSG rules use ASGs as source or destination; all NICs in an ASG must be in the same VNet.

Example

Adding a new web VM's NIC to the asg-web group automatically applies the existing NSG rules.

Exam tip

ASGs simplify micro-segmentation; they are referenced from NSG rules and do not filter traffic on their own.

Related terms