Module 8 · Introduction to Azure Network Watcher
MS Learn: Introduction to Azure Network Watcher ·
learn.azure.intro-to-azure-network-watcherModule note for Path MOC
Overview
Azure Network Watcher is the regional monitoring + diagnostics service for networking. Use its tools (Topology, IP Flow Verify, Next Hop, Packet Capture, Connection Monitor, flow logs, VPN troubleshoot) to find why traffic works or doesn’t.
Learning objectives (from Microsoft Learn)
In this module, you will:
- Learn what Azure Network Watcher is and the functionality it provides.
- Determine whether Azure Network Watcher meets the needs of your organization.
Units
- Introduction
- What is Azure Network Watcher?
- How Azure Network Watcher works
- When to use Azure Network Watcher
- Knowledge check
- Summary
Concepts introduced
- Network Watcher — monitoring/diagnostic toolset.
- Uses NSG + route knowledge to explain flows (IP Flow Verify / Next Hop).
Key terms & commands (Azure CLI)
az network watcher configure -g <rg> --locations <region> --enabled true
az network watcher test-ip-flow-verify -g <rg> --vm <vm> --local-ip <ip> --remote-ip 20.x.x.x --direction Inbound --protocol Tcp --local-port 80 --remote-port 443
az network watcher show-next-hop -g <rg> --vm <vm> --source-ip <ip> --dest-ip 20.x.x.xHands-on
- Enable Network Watcher for your region.
- Use Topology to view a VNet; use IP Flow Verify to confirm an NSG allows/denies a specific flow; use Next Hop to confirm routing.
Exam focus
- Network Watcher is regional — enable per region.
- IP Flow Verify → “which NSG rule blocks my traffic?”
- Next Hop → “which route does my packet take?”
- Topology / Connection Monitor / Packet Capture / flow logs round out the toolbox.
Related
Path MOC · network-watcher · nsg · route-table · configure-network-security-groups