You can use application security groups to configure network security as natural extension of an application’s structure, by arbitrarily grouping virtual machines and defining network security policies based on those groups.
You can reuse your security policy and scale without manual maintenance of explicit IP addresses. The platform handles the complexity of explicit IP addresses and multiple rule sets, so you can focus on your business logic.
For more information, see the documentation.