Azure Network Watcher Basics

3 minute read

Azure Network Watcher is a monitoring service with lots of other important services for network. Most network diagnostics issues can be detected and analyzed with Azure Network Watcher. Learn everything about Network Watcher in this article.

What Network Watcher Does?

  • You use Network Watcher to monitor and repair the network health of IaaS (Infrastructure as Service) resources.
  • It can capture network packets by sniffing the network
  • It can analyze and display the network topology
  • It can audit the security rules of network and VMs.
  • It is a regional service
  • It is automatically enabled in a region when you create or update a virtual network (vNet) in it.

Capabilities of Network Watcher


  • Network Watcher can monitor communication between a VM and another endpoint (could be VM).
  • Network Watcher can view resources in a virtual network.


  • It can diagnose network traffic filtering problems to or from a VM.
  • It can diagnose network routing problems from a VM.
  • It can diagnose outbound connections from a VM.
  • It can capture packets to and from VM.
  • It can determine relative latencies between Azure regions and Internet Service Providers (ISPs).
  • It can show security rules for an interface like network interface for a VM.

Metrics and Logs

  • It can analyze network security groups traffic.
  • It can show diagnostics logs for network resources.

Network Watcher in Azure Portal


You can monitor the topology of your virtual network and you can click on any component to view them.

Connection Monitor

Connection Monitor monitors the health of the connections between 2 endpoints could be 2 virtual networks or 2 VMs.

Next hop

This will give you the next network hop from a given source IP address to a destination IP address. You can use this to troubleshoot the issues.

Example: Source IP address could be your VM in azure and destination IP address could be your local home machine IP address.

So in this example the next hop is Internet.

Effective Security Rules

Check security settings of your IaaS. Example: Check the security settings for your VM in Azure.

Packet capture

Investigate network by capturing the network packets. You can choose the Remote or local IP and port addresses.

👨‍🏫 In Exam remember: Most network diagnostics issues can be detected and analyzed with Azure Network Watcher

Thanks for reading my article till end. I hope you learned something special today. If you enjoyed this article then please share to your friends and if you have suggestions or thoughts to share with me then please write in the comment box.

Become full stack developer 💻

I teach at Fullstack Master. If you want to become Software Developer and grow your carrier as new Software Engineer or Lead Developer/Architect. Consider subscribing to our full stack development training programs. You will learn Angular, RxJS, JavaScript, System Architecture and much more with lots of hands on coding. We have All-Access Monthly membership plans and you will get unlimited access to all of our video courses, slides, download source code & Monthly video calls.

  • Please subscribe to All-Access Membership PRO plan to access current and future angular, node.js and related courses.
  • Please subscribe to All-Access Membership ELITE plan to get everything from PRO plan. Additionally, you will get access to a monthly live Q&A video call with Rupesh and you can ask doubts/questions and get more help, tips and tricks.

Your bright future is awaiting for you so visit today FullstackMaster and allow me to help you to board on your dream software company as a new Software Developer, Architect or Lead Engineer role.

💖 Say 👋 to me!
Rupesh Tiwari
Founder of Fullstack Master