As per the Microsoft Defender for Cloud; i am getting this recommendation to resolve on one of the app service resource as shown: enter image description here

As per the Remediation steps link; it navigates to: https://docs.microsoft.com/en-gb/azure/app-service/app-service-ip-restrictions?WT.mc_id=Portal-Microsoft_Azure_Security
As per the article; i have done few whitelisting of the IP address range (CIDR) and denied the rest as shown for the same app service resource:

I have waited for more than day; still the violation is not getting resolved.
i suspected the NSG; but the article does not talk about NSG. If NSG is the reason; should the same IP address restrictions to be added in NSG as well?
Any help is appreciated?