Azure Compliance ControlsAzure Virtual Network
Network security groups should limit inbound UDP port 137 access from the internet
Network security group provide stateful filtering of inbound/outbound network traffic to Azure resources. It is recommended that no network security group allows unrestricted inbound access to UDP port 137.
What this control checks
Security group rules must not allow unrestricted ingress from any IP address.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_security_group_restrict_inbound_udp_port_137 - Powerpipe Control:
azure_compliance.control.network_security_group_restrict_inbound_udp_port_137 - Trivy Check:
AZU-0047
Last reviewed: 2026-10-13