An NSG is a basic, stateful, packet filtering firewall, and it enables you to control access based on a 5-tuple.