When you start the tool it looks if you already have azure subscriptions imported. If not you can add one by using Add Azure Account.
Then you can then browse through your Cloud Services and VMs inside of the cloud services.
There is an overview of the VM you selected where you can quickly connect, stop, start or delete your VM. Be careful with the delete. The confirm doesn't seem to work somehow, so it's not included in the script. Only the last VM in the service will give a warning.
On the Networking / LB tab you have the option to create, edit and remove Endpoints and ACLs on endpoint. When you click directly on the edit button you see the default endpoints Azure created for you.
If you want to add new ones close the edit screen and fill in the form on the endpoints section. When you check the Configure Load Balancing Set it allows to create a set what you can use to load balance multiple machines on the same port. Click add to add the Endpoint / LB Set.
Now when you click edit again you see the endpoint is listed. You can now manage the ACL for that endpoint to allow for example a specific ip range to access your web site in this example:
*Only on load balanced sets you have to manually update the view as it looks like azure is using some background task what doesn't show you directly the created ACL. For normal endpoints the view is directly updated.
On the Network Security Groups tab you can create, edit remove NSG's. If you have existing NSG, you can manage the ACL by selecting the NSG and click on Edit
When you click on edit you get a new view with all the inbound and outbound ACLs applied to that NSG. You can create, edit and remove ACL rules here.
When you have created the NSG you can then choose to add it to a VM or add it to a Network:
I would encourage you to download the tool and play with it. If you have any feedback, features you would like to see please let me know.
Follow me on Twitter: @markscholman