MEDIUM
Source
CloudSploit
ID
monitor-next-generation-firewall

Monitor Next Generation Firewall

Ensures that Next Generation Firewall (NGFW) Monitoring is enabled in Security Center

When this setting is enabled, Security Center will search for deployments where a NGFW is recommended.

Enable Next Generation Firewall Monitoring by ensuring AuditIfNotExists setting is used for 'All network ports should be restricted on network security groups associated to your virtual machine' from the Azure Security Center.