Azure Marketplace offer: Changes are not taking effect

Dennis Stolp 0 Reputation points
2023-02-15T14:17:18.14+00:00

Hi,

we have a Marketplace Offer, where we changed in the newest version only one thing:

We closed the RDP-Port by changing it in the ARM-Template.

From:

        "securityRules": [
          {
            "name": "default-allow-3389",
            "properties": {
              "priority": 1000,
              "access": "Allow",
              "direction": "Inbound",
              "destinationPortRange": "3389",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "sourceAddressPrefix": "*",
              "destinationAddressPrefix": "*"
            }
          }
        ]

To:

  "properties": {}  

But removing the port does not take effekt. The port is still open.

Is it necessary to explicitly close / deny the port?
Do you have any idea what might be the problem here?

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,876 questions
Azure Managed Applications
Azure Managed Applications
An Azure service that enables managed service providers, independent software vendors, and enterprise IT teams to deliver turnkey solutions through the Azure Marketplace or service catalog.
139 questions
{count} votes

1 answer

Sort by: Most helpful
  1. KarishmaTiwari-MSFT 20,037 Reputation points Microsoft Employee
    2023-02-21T08:18:53+00:00

    Hi Dennis Stolp , Thanks for posting your query on Microsoft Q&A.

    To close the RDP port, you need to remove the security rule that allows incoming traffic to port 3389. You can do this by updating the ARM template to remove the security rule.

    Here is an example of how you can remove the security rule:

    Here is an example of how you can remove the security rule:
    
    
    "securityRules": [
      {
        "name": "default-deny-3389",
        "properties": {
          "priority": 1001,
          "access": "Deny",
          "direction": "Inbound",
          "destinationPortRange": "3389",
          "protocol": "Tcp",
          "sourcePortRange": "*",
          "sourceAddressPrefix": "*",
          "destinationAddressPrefix": "*"
        }
      }
    ]
    

    It is necessary to explicitly close or deny the port to ensure that the port is not open. If the port is still open, it could be due to a misconfiguration in the ARM template or a conflicting security rule. You may want to check the configuration of the security rules and ensure that there are no conflicting rules that allow incoming traffic to port 3389.

    If you have any questions/concerns, please let me know in the" comments". I will be notified that way and can get back to you quickly. Thanks.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.