The foundation of Azure's security framework is an Azure Network Security Group (NSG). You may control traffic to and from the Azure resources you've licensed on an Azure Virtual Network by using an NSG (VNet).
An NSG is fundamentally a collection of access control guidelines that you apply to an Azure resource. It examines incoming and outgoing traffic and applies these rules to decide whether to permit or prohibit access to a certain network packet. Azure divides NSG rules into inbound and outbound categories at a high level. These rules can be managed and configured in a manner akin to classic firewalls. You may administer an Azure NSG and configure the source and destination IP addresses, port number, and protocol using the Azure Portal, Azure PowerShell, or Azure CLI.

Having problem controlling Azure Resources traffic. You can get rid of it. Learn it from Azure Course.

Azure NSG Features
Azure NSGs handle communication and regulate access between:

- Workloads that are hosted on one or more Azure VNets individually.
- Connection between on-premises environments and Azure using Virtual Network Appliances, an Application Gateway, a VPN Gateway, an Azure Firewall, and an Azure Bastion service.
- Internet connections, both to and from.