Is "subnets should be associated with a network security group" recommendation is no longer applicable?

Yasmin, Fitri 266

Previously I saw "subnets should be associated with a network security group" in my Security Center. However, I no longer see this recommendation in Security Center. Does this means the recommendation is deprecated? but it still listed in https://learn.microsoft.com/en-us/azure/security-center/recommendations-reference.

JamesTran-MSFT 36,376 Reputation points Microsoft Employee

2021-03-16T22:30:39.577+00:00
@Yasmin, Fitri
Thank you for your post!

For the specific documentation you referenced, the article lists the recommendations you might see in Azure Security Center. The recommendations shown in your environment depend on the resources you're protecting and your customized configuration.

From your screenshot, it doesn't look like there are any recommendations required for 'subnet' within your subscription, which means you might've resolved the recommendation or the recommendation resolved itself.

Do you know if there were subnets within your subscription that weren't associated with an NSG?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
JamesTran-MSFT 36,376 Reputation points Microsoft Employee

2021-03-18T16:15:52.777+00:00

@Yasmin, Fitri
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
Yasmin, Fitri 266 Reputation points

2021-03-18T16:34:09.167+00:00

Another question, but why does it disappear from the list instead of marked as completed? the example below, the recommendation was resolved and marked as complete.
JamesTran-MSFT 36,376 Reputation points Microsoft Employee

2021-03-22T18:42:16.463+00:00

@Yasmin, Fitri
Thank you for the follow up!

Based off these two recommendations, it looks like the monitoring agent needed to be manually installed, which could be why it changed to "completed". However, with the subnet recommendation, since it was auto-resolved or the subnets could've never had any issues to begin with, that could be the reason why the item wasn't marked as "completed".

When it comes to your ASC recommendations, if you'd like our support team to take a closer look into your environment, please let me know.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.