Start by search “Network watcher” , to get the all the functions
Lets test the IP flow for a VM from.
There are two IP addresses for cn.bing.com: 202.89. 233.100 and 202.89. 233.101 (from nslookup).
For this VM we are using a VNET with a global NSG.
Success, and we see what rule it is.
Lets remove the Port_80 rule.
And the default rule kick’s in, DenyAllInbound
Add packet capture
The trick is how you filter it.