Virtual network verifier enables you to check if your network policies allow or disallow traffic between your Azure network resources, helping you answer simple diagnostic questions, triage why reachability isn’t working as expected, and prove conformance of your Azure setup to your organization’s security compliance requirements.
Within your network manager resource, you can access Virtual Network Verifier’s capabilities by creating a verifier workspace, then defining reachability analysis intents that capture the traffic you want to evaluate. Once you run an analysis on your intent, you can visualize the reachability outcome and parse the reachability analysis results’ JSON.
Virtual network verifier’s reachability analysis evaluates several Azure policies and resources within the network manager’s scope (see the documentation below for supported features). You can even delegate Virtual Network Verifier resources to non-network manager users so they can leverage the network manager’s scope for troubleshooting reachability.
To learn more about this feature, please see the public documentation on virtual network verifier (concept and how-to).
Learn more about Azure Virtual Network Manager.
