Question

Your company currently uses NSG flow logs written to a storage account and analyzed with Traffic Analytics for several production virtual networks. During a compliance review, you learn that Microsoft is retiring NSG flow logs and you must adopt the replacement telemetry solution before the deprecation date. You need to capture Layer-4 IP traffic flow data that is not tied to individual NSGs, works even for subnets without an NSG, and continues to integrate with Traffic Analytics. Which action should you take?

Accepted Answer

Enable virtual network flow logs on the target virtual networks and connect them to a Log Analytics workspace with Traffic Analytics enabled.

Answer

Enable diagnostic settings on each NSG to stream security rule counters to a Log Analytics workspace.

Answer

Deploy Azure Firewall in each virtual network and forward its network rule logs to Traffic Analytics.

Answer

Enable IP flow verify on each virtual machine and export the results to a storage account for scheduled analysis.