Merge pull request #25817 from MashaMSFT/fixes

Processing public PR 7923

Author: prmerger-automator[bot]

azure-sql/virtual-machines/windows/availability-group-manually-configure-tutorial-single-subnet.md

@@ -42,6 +42,7 @@ The following table summarizes the prerequisites that you need before you can co
 |:::image type="icon" source="./media/availability-group-manually-configure-tutorial-single-subnet/square.png" border="false":::   **Firewall ports open** | - SQL Server: **1433** for a default instance <br/> - Database mirroring endpoint: **5022** or any available port <br/> - Load balancer IP address health probe for an availability group: **59999** or any available port <br/> - Load balancer IP address health probe for cluster core: **58888** or any available port |
 |:::image type="icon" source="./media/availability-group-manually-configure-tutorial-single-subnet/square.png" border="false":::   **Failover clustering** | Required for both SQL Server instances |
 |:::image type="icon" source="./media/availability-group-manually-configure-tutorial-single-subnet/square.png" border="false":::   **Installation domain account** | - Local administrator on each SQL Server instance <br/> - Member of the **sysadmin** fixed server role for each SQL Server instance  |
+|:::image type="icon" source="./media/availability-group-manually-configure-tutorial-single-subnet/square.png" border="false":::   **Network Security Groups (NSGs)** | If the environment is using [Network security groups](/azure/virtual-network/network-security-groups-overview), ensure that the current configuration **allows Network traffic** through ports described in [Configure the firewall](availability-group-manually-configure-prerequisites-tutorial-single-subnet.md#endpoint-firewall). |
 
 ## <a name="create-the-cluster"></a> Create the cluster