Azure Virtual machine NIC has IP forwarding enabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_118
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	544264bb-eb95-4142-90b3-f7f41d5ef311

Impact

By disabling IP forwarding on the NIC of your Azure virtual machine, you can help to prevent the virtual machine from acting as a router and forwarding traffic to unintended destinations. This can help to improve the security of your virtual machine and protect it from potential threats such as man-in-the-middle attacks or data breaches.

How to Fix

Resource: azurerm_network_interface

• Arguments: enable_ip_forwarding [source,go]

---

resource "azurerm_network_interface" "example" { ...

• enable_ip_forwarding = false }

---