Feedback for PE

[vikedesai]

As per the current document, Traffic across a private link To log traffic while accessing platform as a service (PaaS) resources via private link, enable NSG flow logs on the network security group of the subnet that contains the private link. Because of platform limitations, only traffic at the source VMs can be captured. Traffic at the destination PaaS resource can't be captured.

But the customer is getting confused that if Private endpoint interface will gathered the traffic or not, can we make it simple here. As per limitation, Private endpoint traffic cannot be gathered. Although NSG rules can be applied on a given private link endpoint (by setting the property), NSG FlowLogs are not generated. Flow logs are generated for any traffic originating from the Source VM.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: bd699dac-d6e5-5a39-624f-2d3f77f92fca
• Version Independent ID: c922bcd2-0778-a7af-4855-1bff6c9ce380
• Content: NSG flow logs overview - Azure Network Watcher
• Content Source: articles/network-watcher/network-watcher-nsg-flow-logging-overview.md
• Service: network-watcher
• GitHub Login: @halkazwini
• Microsoft Alias: halkazwini

[ChaitanyaNaykodi-MSFT]

@vikedesai Thank you for your feedback! We have assigned this issue to the author to review further and take the next course of action.

[halkazwini]

Hi @vikedesai Thank you for you feedback! I've just updated the private endpoint limitation section. Expect to see the update reflected in the public doc in the next few hours.

please-close