services / Azure / Network Virtual Appliance

A Network Virtual Appliance (NVA) is a third-party firewall/router VM appliance that inspects and forwards network traffic in a VNet or Virtual WAN hub.

An NVA sits in the traffic path inspecting/forwarding production traffic; controlling it enables interception, redirection, or disruption of that traffic.

Microsoft.​Network/​networkVirtualAppliances/​restart/​action

Restarting the appliance interrupts the traffic it inspects/forwards, denying service to dependent flows for the duration of the restart.

Risks

1. Denial-of-service (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links