Azure Bastion is a service you deploy that lets you connect to virtual machines directly over TLS from the Azure portal, or via the native SSH or RDP client already installed on your local computer. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity…
Microsoft Defender for Cloud (MDC) is a security service that helps keep public cloud workloads safe. It provides security and visibility for workloads in different cloud environments and now its expanding its capability for serverless workloads including Azure Web Apps, Azure Functions, and AWS Lambda. In this blog, let me walkthrough the features of servers less protection with MDC….
IP Address Management (IPAM) is crucial in the IT landscape for several reasons. As organisations migrate to cloud infrastructure, the complexity of managing IP addresses increases due to dynamic resource allocation and the potential for overlapping address spaces. IPAM helps streamline this process by allowing for efficient planning and organisation of IP address allocation, ensuring that each resource receives…
In this post, we’ll explore the benefits of using Azure Firewall as an explicit proxy for your outbound traffic and how to set it up for seamless application connectivity. Azure Firewall – Explicit Proxy Azure Firewall operates primarily in a transparent proxy mode by default, enabling seamless interception and management of outbound network traffic. In this configuration, traffic is…
Microsoft Defender for Cloud Service has officially been integrated into the Defender Security Portal, marking a significant development for cloud security management. In this blog, we will explore this integration, discussing how it enhances the security posture of cloud environments, streamlines security operations, and improves threat detection and response. We’ll examine the new features introduced, the benefits they bring…
Last year, Azure announced new capabilities in the Azure Application Gateway. The Azure Application Gateway service provides more capabilities with Layer 7 (HTTP, HTTPS, WebSockets, and HTTP/2). The capabilities are extended to support Layer 4 (TCP) and TLS (Transport Layer Security) proxying. In this blog post, we will explore the new capabilities and unlock the additional features. What is…
Azure recently rebranded Firewall Manager and added more network security services, introducing a new experience called “Azure Network Security Hub”. The Network Security Hub is a centralised interface that brings Azure Firewall, Web Application Firewall (WAF), and DDoS Protection into one place. This change is part of a broader effort to simplify the Azure Networking portfolio and better align…
Welcome to my next blog post with a deep dive into the depths of Azure Network Watcher. This post will discover the powerful features and insights this tool offers to optimise and monitor your network performance like never before. Let’s explore the functionalities that can help you troubleshoot issues, analyse network traffic, and ensure the robust security of your…
Welcome to my blog! In this post, I will give you a comprehensive overview of Azure Network Security Perimeter (NSP) services. Announced at last year’s MS Ignite and recently made generally available, this service offers unique features that distinguish it from other options. Let’s explore its key attributes and understand their significance in enhancing Azure PaaS network security. Understanding…
The adoption of containerised applications has surged due to their flexibility, scalability, and efficiency. However, this growth also brings new security challenges. Containers often operate in shared environments, increasing the risk of vulnerabilities and potential threats from both internal and external sources. With the adoption of Zero Trust, we need to detect and prevent unauthorised access and attacks on…
