Challenge: Force every tier through the inspection appliance

تحدّي: عدّي كل الطبقات على جهاز التفتيش

Security requires that traffic between the frontend and backend subnets of ch-rt-vnet is inspected in both directions by the appliance fw1 (10.20.3.4), and that the backend tier can never reach the internet. Implement it and prove it with Network Watcher.

The 4 tasks you will do

• Requirement 1 — Frontend → backend through fw1المطلوب 1 — من الـ Frontend للـ Backend عن طريق fw1
• Requirement 2 — Symmetric return path and no internet for the backendالمطلوب 2 — طريق رجوع متماثل ومفيش إنترنت للـ Backend
• Requirement 3 — Make fw1 able to forwardالمطلوب 3 — خلّي fw1 يقدر يمرّر الترافيك
• Requirement 4 — Prove the pathالمطلوب 4 — أثبت الطريق

The lesson it belongs to

• Manage and control traffic flow in your Azure deployment with routes