Network security groups should limit inbound TCP port 25 access from the internet
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted inbound access to TCP port 25.
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources.
What this control checks
Network security groups must not accept inbound TCP port 25 traffic from the internet
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.network_security_group_restrict_inbound_tcp_port_25.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_security_group_restrict_inbound_tcp_port_25 - Powerpipe Control:
azure_compliance.control.network_security_group_restrict_inbound_tcp_port_25
Last reviewed: 2026-10-13