Network security groups, application security groups, and effective rules

An external contact reports being unable to reach the management port of a virtual machine on the original site, and nobody on the team remembers touching a security rule recently. Before reopening a port blindly, it helps to know where…