How can Azure handle this situation?
You need to isolate network traffic among VMs in a subnet, which is part of a Virtual Network with little downtime and impact on users?
virtual-network
Solution - This would ensure that the virtual machines are kept isolated without the need for additional security, like a Network Security Group.