Managed VNet isolation: allow_internet_outbound vs allow_only_approved_outbound vs disabled
This sheet compares allow_internet_outbound, allow_only_approved_outbound, disabled.
| Criterion | allow_internet_outbound | allow_only_approved_outbound | disabled |
|---|---|---|---|
| Outbound behaviour | All internet outbound permitted | Blocked by default; only approved service tags, FQDNs and private endpoints | Managed network off; no outbound restriction |
The verdict, the full comparison, 4 rules and 2 traps are part of AI-300 access. Unlock AI-300.