Deploy Microsoft Azure Monitoring Points

Embed Microsoft Azure optimized VM Monitoring Points in your Azure infrastructure to monitor your network or web application performance.

To start monitoring, download the Monitoring Point installation bundle from Google Cloud, and then follow the instructions from AppNeta to deploy it using Bicep.

Before you begin

The deployment environment and Monitoring Points have specific networking requirements to ensure that the Monitoring Point can be installed successfully and communicate back to the Cloud Network Insights control plane.

Required roles

To get the permissions that you need to add Monitoring Points, ask your administrator to grant you the Cloud Network Insights Editor (roles/networkmanagement.CloudNetworkInsightsEditor) IAM role on the project that has Cloud Network Insights enabled. For more information about granting roles, see Manage access to projects, folders, and organizations.

You might also be able to get the required permissions through custom roles or other predefined roles.

Firewall requirements

Since we recommend installing Monitoring Points behind your firewalls, you might need to modify your firewall rules. Monitoring Points require outbound internet access to communicate back to the Cloud Network Insights control plane.


Protocol
Port
Description

TCP
443 (HTTPS)
Required. Connectivity to the Cloud Network Insights control plane

UDP
123 (NTP)
Required. Network Time Protocol. The Monitoring Point will fail to connect if time is not synced

UDP/TCP
53 (DNS)
Required. Domain Name Service to resolve Cloud Network Insights endpoints

UDP
3239, 33434
Test Traffic. Required for standard Network Path monitoring (dual-ended)

ICMP
Type 8 (echo request)
Test Traffic. Required for single-ended paths (for example, pinging 8.8.8.8).

For more information, see Firewall Configuration from AppNeta.

Monitoring Point requirements

Review AppNeta's documentation for Azure Monitoring Point to ensure that you can successfully deploy the Monitoring Point.

Download Monitoring Point installation bundle

Get the installation bundle and ensure that the bundle is on the target host.

Console

  1. In the Google Cloud console, navigate to Network Intelligence > Cloud Network Insights > Monitoring Points.

    Go to Cloud Network Insights

  2. Click Add Monitoring Point.

  3. In the Platform Type list, select Azure, and then click Continue.

  4. Enter the Hostname of the container. This is the name of the host you're installing the Monitoring Point on.

  5. In Download the Monitoring Point, choose how you want to download the installation bundle.

    • To download the installation bundle locally, select Download locally.
      1. Click Download Monitoring Point.
      2. Move the installation bundle to the target host.
    • To download the installation bundle on the target host using a terminal, select Run a command on the host.
      1. Click Open shell and generate token. You might need to authorize Cloud Shell.
      2. Press Enter to generate a token, and then copy and paste it in the text field.
      3. Open a terminal to your target host using administrator credentials, and run the generated command to download the installation bundle. The curl command is valid for one hour.

Install your Microsoft Azure Monitoring Point

Once the install bundle is on the target host, follow the instructions from AppNeta to install the Monitoring Point.

Verify the install

Open the Google Cloud console and navigate to Network Intelligence Center > Cloud Network Insights. After 2–5 minutes, the Monitoring Point appears in the table with the status Active. If it doesn't appear within ten minutes, see Troubleshooting.

Remove Monitoring Points

To remove a Monitoring Point, delete it in AppNeta. For more information about removing a Monitoring Point, see the AppNeta documentation.

What's next

After you add Monitoring Points, it's time to create monitoring policies to populate Cloud Network Insights with data.