$getsecuritygrp = Get-AzNetworkSecurityGroup -Name "NSGName"
$GetRuleConfig = Get-AzNetworkSecurityRuleConfig -Name "RuleName" -NetworkSecurityGroup $getsecuritygrp
if ($GetRuleConfig -eq $null){
$GetRuleConfig1 = Get-AzNetworkSecurityRuleConfig -Name "RuleName" -NetworkSecurityGroup $getsecuritygrp
Get-AzNetworkSecurityGroup -Name $getsecuritygrp | Set-AzNetworkSecurityRuleConfig -Name $GetRuleConfig1.name -Protocol $GetRuleConfig1.Protocol -SourcePortRange $GetRuleConfig1.SourcePortRange`
-DestinationPortRange $GetRuleConfig1.DestinationPortRange -SourceAddressPrefix $GetRuleConfig1.SourceAddressPrefix`
-DestinationAddressPrefix "*"`
-Priority $GetRuleConfig1.Priority -Access $GetRuleConfig1.Access`
-Direction $GetRuleConfig1.Direction | Set-AzNetworkSecurityGroup
}
else{
$GetRuleConfig2 = Get-AzNetworkSecurityRuleConfig -Name "RuleName" -NetworkSecurityGroup $getsecuritygrp}
Get-AzNetworkSecurityGroup -Name $getsecuritygrp | Set-AzNetworkSecurityRuleConfig -Name BLOCK_INBND_SPAM_IP -Protocol $GetRuleConfig2.Protocol -SourcePortRange $GetRuleConfig2.SourcePortRange`
-DestinationPortRange $GetRuleConfig2.DestinationPortRange -SourceAddressPrefix $GetRuleConfig2.SourceAddressPrefix`
-DestinationAddressPrefix "*"`
-Priority $GetRuleConfig2.Priority -Access $GetRuleConfig2.Access`
-Direction $GetRuleConfig2.Direction | Set-AzNetworkSecurityGroup