Azure REST 2025-03-01 · Security Admin + live connectivity evidence

    PS> .\scripts\Get-AzureVirtualNetworkManagerEvidence.ps1 `
        -SubscriptionId $subscriptionId -Evidence Security

    Rule                       Priority  Effective  Direction  Port  Protocol
    ----                       --------  ---------  ---------  ----  --------
    Deny-Unmanaged-App-Port    100       Deny       Inbound    8080  Tcp

    PS> .\scripts\Get-AzureVirtualNetworkManagerEvidence.ps1 `
        -SubscriptionId $subscriptionId -Evidence Connectivity

    PORT=8080 RESULT=BLOCKED
    PORT=8443 RESULT=OPEN

    [PASS] Central Security Admin Deny terminates evaluation before the NSG allow.
    [PASS] The local NSG still permits the unmanaged control port 8443.