[Click on image for larger view.] Figure 3. Creating a storage account for diagnostics logs. Next, we'll want to control access to the vNet through a software firewall -- Network Security Group (NSG) ...