PS> .\scripts\Get-AzureVirtualNetworkManagerEvidence.ps1 `
    -SubscriptionId $subscriptionId -Evidence Security

Rule                       Priority  Effective  Direction  Port  Protocol
----                       --------  ---------  ---------  ----  --------
Deny-Unmanaged-App-Port    100       Deny       Inbound    8080  Tcp

PS> .\scripts\Get-AzureVirtualNetworkManagerEvidence.ps1 `
    -SubscriptionId $subscriptionId -Evidence Connectivity

PORT=8080 RESULT=BLOCKED
PORT=8443 RESULT=OPEN

[PASS] Central Security Admin Deny terminates evaluation before the NSG allow.
[PASS] The local NSG still permits the unmanaged control port 8443.