I want to use NSGs to create a DMZ in Azure. A traditional firewall comes with extensive logging to not only enable auditing but to also assist in troubleshooting connectivity problems between the DMZ and the internal firewall.
Does Azure provide any mechanism to log what traffic is being passed/blocked by the NSG?