Packet tracert functionality for Network Security Group (NSG).
As NSG rules become more complex it's would be great to have troubleshooting.
For example I want to define source ip address/port and destination ip/port and tool would check is traffic allowed and if not - what rule denies it.
This feature is called IP Flow Verify and is part of the Network Watcher service. Currently in Public Preview