title: Azure default NSG not blocking internet traffic
body: <p>I am working with <a href="https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet#-connect-to-a-web-service-hosted-within-a-virtual-network" rel="nofollow noreferrer">this article</a> and have setup the network diagram described in the article itself and gone a little further by adding a NSG.</p>
  <p>Given the below diagram and context I am struggling to understand why I can hit my API directly when the NSG is only configured with the default rules of ALLOW VNET INBOUND, ALLOW AZURE LOAD BALANCER INBOUND and DENY ALL INBOUND</p>
  <p><a href="https://i.stack.imgur.com/GBgRX.png" rel="nofollow noreferrer">Azure APIM with Networks</a></p>
  <p>In advance I will own to being truly terrible at networking, despite hours of studying.</p>