Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →Expert knowledge for Azure Networking development including troubleshooting, decision making, architecture & design patterns, security, and configuration. Use when designing VNets, hub-spoke/Virtual WAN, Azure Firewall/DDoS, NSG/ASG rules, or private DNS, and other Azure Networking related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure Network Watcher
.claude/skills/microsoftdocs-azure-networking/SKILL.md| Test case | Without → With | Effect | Δ tokens | Δ turns |
|---|---|---|---|---|
| case-18 | ✗→✓ | ▲ Improved | 200% | 0% |
| case-02 | ✓→✗ | ▼ Worse | -9% | 0% |
| case-04 | ✓→✗ | ▼ Worse | -11% | 0% |
| case-06 | ✓→✗ | ▼ Worse | 44% | 0% |
| case-11 | ✓→✗ | ▼ Worse | 53% | 0% |
This skill provides expert guidance for Azure Networking. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.
> IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file
> IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.| Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L34-L39 | Diagnosing and resolving Azure network resource issues, including monitoring, troubleshooting connectivity/performance, and fixing failed Microsoft.Network provisioning states. | | Best Practices | L40-L44 | Guidance on boosting Azure NVA/VM network throughput and latency using Accelerated Connections, including configuration steps and performance optimization best practices. | | Decision Making | L45-L62 | Guidance on choosing Azure network architectures and services (load balancing, DDoS, firewall/WAF, hybrid/multicloud, private access, egress/ingress) for specific deployment scenarios. | | Architecture & Design Patterns | L63-L75 | Designing secure Azure network topologies: Zero Trust, hub-spoke, flat VNets, IP/subnet planning, multi-region and global transit (Virtual WAN), and common workload network patterns. | | Security | L76-L90 | Designing and enforcing network security in Azure: firewalls, WAF, NSGs/ASGs, secure DNS, DDoS protection, and applying Zero Trust and policy compliance to all network paths. | | Configuration | L91-L95 | Configuring and centrally managing virtual networks with Virtual Network Manager, and enforcing/using built-in Azure Policy definitions for networking resources. |
| Topic | URL | |-------|-----| | Monitor and troubleshoot Azure network resources | https://learn.microsoft.com/en-us/azure/networking/design-guide/monitor | | Diagnose failed Microsoft.Network provisioning states | https://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state |
| Topic | URL | |-------|-----| | Optimize NVA and VM performance with Accelerated Connections | https://learn.microsoft.com/en-us/azure/networking/nva-accelerated-connections |
| Topic | URL | |-------|-----| | Use Azure region latency stats for deployment planning | https://learn.microsoft.com/en-us/azure/networking/azure-network-latency | | Choose the right Azure load balancing service | https://learn.microsoft.com/en-us/azure/networking/design-guide/app-delivery | | Plan cross-cloud connectivity with Azure networking | https://learn.microsoft.com/en-us/azure/networking/design-guide/cross-cloud | | Plan cross-region and multicloud connectivity in Azure | https://learn.microsoft.com/en-us/azure/networking/design-guide/cross-region | | Select the right Azure DDoS protection tier | https://learn.microsoft.com/en-us/azure/networking/design-guide/ddos | | Plan Azure hybrid connectivity with VPN or ExpressRoute | https://learn.microsoft.com/en-us/azure/networking/design-guide/hybrid-connectivity | | Select Azure services for internet ingress | https://learn.microsoft.com/en-us/azure/networking/design-guide/internet-ingress | | Plan lift-and-shift Azure network designs | https://learn.microsoft.com/en-us/azure/networking/design-guide/lift-and-shift | | Design networks for migrate-and-modernize workloads | https://learn.microsoft.com/en-us/azure/networking/design-guide/migrate-modernize | | Control outbound internet egress from Azure VNets | https://learn.microsoft.com/en-us/azure/networking/design-guide/outbound-egress | | Select private access options for Azure PaaS | https://learn.microsoft.com/en-us/azure/networking/design-guide/private-platform-as-a-service | | Select secure application delivery services in Azure | https://learn.microsoft.com/en-us/azure/networking/secure-application-delivery | | Choose a secure Azure network topology for workloads | https://learn.microsoft.com/en-us/azure/networking/secure-network-topology | | Choose between Azure Firewall, DDoS Protection, and WAF | https://learn.microsoft.com/en-us/azure/networking/security/network-security |
| Topic | URL | |-------|-----| | Deploy a Zero Trust virtual network for Azure web apps | https://learn.microsoft.com/en-us/azure/networking/create-zero-trust-network-web-apps | | Design a secure hub-spoke network for Azure web apps | https://learn.microsoft.com/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network | | Implement a single-workload flat VNet topology | https://learn.microsoft.com/en-us/azure/networking/design-guide/flat-network | | Design hub-and-spoke virtual networks in Azure | https://learn.microsoft.com/en-us/azure/networking/design-guide/hub-spoke | | Plan IP addressing for Azure virtual networks | https://learn.microsoft.com/en-us/azure/networking/design-guide/ip-planning | | Design multi-region Azure network architectures | https://learn.microsoft.com/en-us/azure/networking/design-guide/multi-region | | Architect global transit networks with Azure Virtual WAN | https://learn.microsoft.com/en-us/azure/networking/design-guide/virtual-wan | | Design Azure virtual networks and subnet layouts | https://learn.microsoft.com/en-us/azure/networking/design-guide/vnets-subnets | | Apply common Azure networking workload patterns | https://learn.microsoft.com/en-us/azure/networking/design-guide/workload-patterns |
| Topic | URL | |-------|-----| | Design Azure Firewall tiers and traffic inspection | https://learn.microsoft.com/en-us/azure/networking/design-guide/azure-firewall | | Secure developer and admin access to Azure VMs | https://learn.microsoft.com/en-us/azure/networking/design-guide/developer-admin-access | | Design secure DNS and private name resolution in Azure | https://learn.microsoft.com/en-us/azure/networking/design-guide/dns-security | | Secure Azure VNets with NSGs and ASGs | https://learn.microsoft.com/en-us/azure/networking/design-guide/network-application-security-groups | | Protect web apps with Azure Web Application Firewall | https://learn.microsoft.com/en-us/azure/networking/design-guide/web-application-firewall | | Apply Azure Policy compliance controls to networking | https://learn.microsoft.com/en-us/azure/networking/security-controls-policy | | Apply Zero Trust to Application Gateway WAF | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-application-gateway-waf | | Implement Zero Trust with Azure Firewall | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-azure-firewall | | Harden Azure DDoS Protection with Zero Trust | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-ddos-protection | | Secure Azure Front Door WAF using Zero Trust | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-front-door-waf | | Apply Zero Trust to Azure network security | https://learn.microsoft.com/en-us/azure/networking/security/zero-trust-network-security |
| Topic | URL | |-------|-----| | Manage Azure VNets centrally with Virtual Network Manager | https://learn.microsoft.com/en-us/azure/networking/design-guide/azure-virtual-network-manager | | Use built-in Azure Policy for networking services | https://learn.microsoft.com/en-us/azure/networking/policy-reference |
| Case | Status | Duration (ms) | Turns | Tokens | Tool calls | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Without | With | Δ | Without | With | Δ | Without | With | Δ | Without | With | Δ | ||
case-01 | pass→pass | 28,154 | 22,946 | -18% | 1 | 1 | 0% | 1,706 | 4,132 | +142% | 0 | 0 | — |
case-02 | pass→fail | 22,590 | 42,334 | +87% | 1 | 1 | 0% | 3,034 | 2,759 | -9% | 0 | 0 | — |
case-03 | pass→pass | 13,333 | 15,783 | +18% | 1 | 1 | 0% | 1,193 | 3,914 | +228% | 0 | 0 | — |
case-04 | pass→fail | 21,455 | 42,849 | +100% | 1 | 1 | 0% | 2,920 | 2,598 | -11% | 0 | 0 | — |
case-22 | pass→pass | 28,180 | 16,047 | -43% | 1 | 1 | 0% | 2,963 | 4,326 | +46% | 0 | 0 | — |
case-05 | pass→pass | 23,698 | 28,189 | +19% | 1 | 1 | 0% | 2,679 | 4,401 | +64% | 0 | 0 | — |
case-06 | pass→fail | 18,443 | 33,468 | +81% | 1 | 1 | 0% | 1,929 | 2,774 | +44% | 0 | 0 | — |
case-07 | pass→pass | 13,082 | 15,300 | +17% | 1 | 1 | 0% | 1,358 | 3,848 | +183% | 0 | 0 | — |
case-08 | pass→pass | 20,277 | 20,721 | +2% | 1 | 1 | 0% | 2,087 | 4,166 | +100% | 0 | 0 | — |
case-09 | pass→pass | 12,348 | 15,134 | +23% | 1 | 1 | 0% | 1,226 | 3,563 | +191% | 0 | 0 | — |
case-10 | pass→pass | 10,908 | 15,232 | +40% | 1 | 1 | 0% | 810 | 3,713 | +358% | 0 | 0 | — |
case-11 | pass→fail | 21,429 | 48,809 | +128% | 1 | 1 | 0% | 1,755 | 2,686 | +53% | 0 | 0 | — |
case-12 | pass→pass | 9,730 | 13,615 | +40% | 1 | 1 | 0% | 777 | 3,335 | +329% | 0 | 0 | — |
case-13 | pass→pass | 11,634 | 28,971 | +149% | 1 | 1 | 0% | 870 | 3,428 | +294% | 0 | 0 | — |
case-14 | pass→pass | 15,332 | 48,960 | +219% | 1 | 1 | 0% | 1,779 | 3,872 | +118% | 0 | 0 | — |
case-15 | pass→pass | 14,537 | 41,414 | +185% | 1 | 1 | 0% | 1,569 | 3,773 | +140% | 0 | 0 | — |
case-16 | pass→pass | 12,340 | 23,377 | +89% | 1 | 1 | 0% | 1,122 | 3,633 | +224% | 0 | 0 | — |
case-17 | pass→pass | 13,844 | 12,888 | -7% | 1 | 1 | 0% | 1,330 | 3,186 | +140% | 0 | 0 | — |
case-18 | fail→pass | 12,643 | 15,043 | +19% | 1 | 1 | 0% | 1,197 | 3,587 | +200% | 0 | 0 | — |
case-19 | pass→pass | 14,478 | 14,846 | +3% | 1 | 1 | 0% | 1,695 | 3,725 | +120% | 0 | 0 | — |
case-20 | pass→pass | 16,950 | 27,884 | +65% | 1 | 1 | 0% | 2,426 | 4,345 | +79% | 0 | 0 | — |
case-21 | pass→pass | 13,968 | 15,352 | +10% | 1 | 1 | 0% | 1,584 | 4,321 | +173% | 0 | 0 | — |
DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 22 cases were attempted, and 18 counted toward the lift figure. The other 4 produced results that are not comparable between the two arms, so they are excluded from the headline rather than averaged into it. The headline lift of -14 percentage points is the difference between those two pass rates over the 18 comparable cases. 4 cases got worse with the skill loaded, and they are included in that figure.
The publisher has shipped newer versions since this run, so these numbers describe v3, not the version currently listed.
Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.
| Model | Method | Date | Lift |
|---|---|---|---|
| gemini-3.6-flash | verified | 8/17/2026 | — |
Other measured skills in the registry, with their headline benchmark lift.