In this lecture, we'll explore the concepts behind Network Security Groups in Microsoft Azure Virtual Networks. Network Security Groups are essentially groupings of firewall rules that can be applied to an entire Virtual Network subnet, or to a specific Network Interface that is typically attached to a Virtual Machine. Network Security Groups allow or deny network traffic, based on a variety of attributes, such as TCP or UDP, source and destination TCP or UDP port numbers, and others.