Start course

When you have network connections that are critical to your business, it’s important to monitor them at all times. Azure Network Watcher is a collection of network monitoring and troubleshooting tools. Not only does it allow you to set up automated monitoring, but it also gives you a suite of tools that will allow you to diagnose almost any network issue.

In this course, you’ll learn about both troubleshooting and monitoring. We’ll start with the troubleshooting tools: IP Flow Verify, Security Group View, Next Hop, Connection Troubleshoot, and VPN Troubleshoot. Then you’ll see how to use the monitoring and analysis tools: Connection Monitor, Logs, Traffic Analytics, and Network Performance Monitor.

Learning Objectives

  • Use Network Watcher’s troubleshooting tools to diagnose Azure networking issues
  • Configure Network Watcher’s monitoring tools to alert you when there are critical network issues
  • Use Network Watcher’s analysis tools to get a more comprehensive view of networking issues

Intended Audience

  • People who want to become Azure cloud architects
  • People who are preparing to take Microsoft’s AZ-303 exam


  • Basic knowledge of Azure virtual networks

To see the full range of Microsoft Azure Content, visit the Azure Training Library.


I hope you enjoyed learning about Azure Network Watcher. Let's do a quick review of what you learned. Let's start with Network Watcher's troubleshooting tools. IP flow verify tests whether packets are allowed to flow between a VM and an endpoint. It checks the networks security groups that are associated with the VM and tells you which rule allows or denies the connection. You can use the security group view to get more details about the rule and its security group. Next hop can help with routing problems. It simply tells you the first hop between a VM and an endpoint. The Connection Troubleshoot tool shows all of the hops between a VM and an endpoint, and it also shows the latency between the source and destination. To use this tool, you have to install the Network Watcher Agent extension on the VM. The VPN troubleshoot tool can help diagnose problems involving virtual network gateways. Now let's look at the monitoring tools. Connection Monitor is a long-running version of the Connection Troubleshoot tool. 

First, you tell it which connections you want to monitor, and then you create alerts in Azure Monitor to notify you if certain problems occur. Network Performance Monitor does many of the same things as the Connection Monitor, but it requires the Log Analytics agent instead of the Network Watcher agent, and it includes tool designed specifically for ExpressRoute connections and connectivity to Office 365 or Dynamics 365. Network Watcher has two kinds of logs: NSG flow logs and diagnostic logs. An NSG flow log keeps track of what traffic was allowed through an NSG and what was denied, on a per-rule basis. Diagnostic logs track both NSGs and network interfaces, but they don't record as much information about NSG events as flow logs do. Traffic Analytics gives you a dashboard that summarizes the logs.

It makes it easy to see what's happening with your network, including malicious traffic, and it also lets you drill down into the details when you need to see more. Now you know how to use Network Watcher's troubleshooting tools to diagnose Azure networking issues, configure Network Watcher's monitoring tools to alert you when there are critical network issues, and use Network Watcher's analysis tools to get a more comprehensive view of networking issues. To learn more about Azure's network services, you can read Microsoft's documentation. Also watch for new Microsoft Azure courses on Cloud Academy, because we're always publishing new courses. Please give this course a rating, and if you have any questions or comments, please let us know. Thanks and keep on learning.

About the Author
Learning Paths

Guy launched his first training website in 1995 and he's been helping people learn IT technologies ever since. He has been a sysadmin, instructor, sales engineer, IT manager, and entrepreneur. In his most recent venture, he founded and led a cloud-based training infrastructure company that provided virtual labs for some of the largest software vendors in the world. Guy’s passion is making complex technology easy to understand. His activities outside of work have included riding an elephant and skydiving (although not at the same time).