Introduction Every Azure environment starts small, often with just a few virtual networks, a gateway for hybrid connectivity, and maybe one Network Virtual Appliance in a hub. This setup works fine at first. But as the business grows—opening new regions, adding more workloads, and needing branch office connectivity—you’ll find yourself managing many VNets and a complicated web of peering…
Azure Bastion is a service you deploy that lets you connect to virtual machines directly over TLS from the Azure portal, or via the native SSH or RDP client already installed on your local computer. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity…
Microsoft Defender for Cloud (MDC) is a security service that helps keep public cloud workloads safe. It provides security and visibility for workloads in different cloud environments and now its expanding its capability for serverless workloads including Azure Web Apps, Azure Functions, and AWS Lambda. In this blog, let me walkthrough the features of servers less protection with MDC….
In this blog post, I walk through how to get started with Azure SRE Agent and demonstrate how agentic assistance can be applied to real networking operational scenarios. The post covers SRE agent fundamentals, followed by a live demo showing how Azure networking services can be operationalised with SRE agent workflows to reduce operational toil. What is an SRE…
IP Address Management (IPAM) is crucial in the IT landscape for several reasons. As organisations migrate to cloud infrastructure, the complexity of managing IP addresses increases due to dynamic resource allocation and the potential for overlapping address spaces. IPAM helps streamline this process by allowing for efficient planning and organisation of IP address allocation, ensuring that each resource receives…
In the ever-evolving landscape of cloud-native applications, the complexity of managing Kubernetes clusters can be complex. When it comes to troubleshooting network issues within Azure Kubernetes Service (AKS), time is of the essence. Azure has introduced the Container Network Insights Agent — an innovative solution that simplifies and accelerates your network troubleshooting. In this post, we’ll explore how this…
In this post, we’ll explore the benefits of using Azure Firewall as an explicit proxy for your outbound traffic and how to set it up for seamless application connectivity. Azure Firewall – Explicit Proxy Azure Firewall operates primarily in a transparent proxy mode by default, enabling seamless interception and management of outbound network traffic. In this configuration, traffic is…
Microsoft Defender for Cloud Service has officially been integrated into the Defender Security Portal, marking a significant development for cloud security management. In this blog, we will explore this integration, discussing how it enhances the security posture of cloud environments, streamlines security operations, and improves threat detection and response. We’ll examine the new features introduced, the benefits they bring…
Last year, Azure announced new capabilities in the Azure Application Gateway. The Azure Application Gateway service provides more capabilities with Layer 7 (HTTP, HTTPS, WebSockets, and HTTP/2). The capabilities are extended to support Layer 4 (TCP) and TLS (Transport Layer Security) proxying. In this blog post, we will explore the new capabilities and unlock the additional features. What is…
Azure recently rebranded Firewall Manager and added more network security services, introducing a new experience called “Azure Network Security Hub”. The Network Security Hub is a centralised interface that brings Azure Firewall, Web Application Firewall (WAF), and DDoS Protection into one place. This change is part of a broader effort to simplify the Azure Networking portfolio and better align…
