Inbound traffic rules - NACL IN, SG IN, NACL OUT (SG OUT NOT checked)

If inbound request is rejected, SG or NACL could be mis-configured

If outbound response is rejected, NACL is mis-configured

Outbound traffic rules - SG OUT, NACL OUT, NACL IN (SG IN NOT checked)

If outbound request is rejected, SG or NACL could be mis-configured

If inbound response is rejected, NACL is mis-configured

Problem with response => Problem with NACL

Problem with request could be problems with NACL or SG