Security

Do Not Enable Azure Storage Account Firewall – IaaS

April 15, 2019 // 2 Comments

If you read through the security recommendations in Azure Security Center, you do get given out to a lot. A lot of it makes no sense if you understand Azure and the recommendations. One that appeared to make sense was to enable the relatively new firewall in Azure Storage: Only allow trusted [...]

Locking Down Network Access to the Azure Application Gateway/Firewall

March 6, 2019 // 1 Comment

In this post, I will explain how you can use a Network Security Group (NSG) to completely lock down network access to the subnet that contains an Azure Web Application Gateway (WAG)/Web Application Firewall (WAF). The stops are as follows: Deploy a WAG/WAF to a dedicated subnet. Create a Network [...]

Cloud Camp 2018 – It’s A Wrap!

October 18, 2018 // 0 Comments

Yesterday, Cloud Camp 2018, run by MicroWarehouse and sponsored by Microsoft Surface and Veeam, ran in the Dublin Convention Centre here in Ireland. 4 tracks, 20 (mostly MVP) sessions, 2 keynotes, and hundreds of satisfied attendees. It was great fun – but we’re all a little tired today Photo [...]

Planning Network Security For Your Mission-Critical Workloads With Virtual Networks

September 26, 2018 // 0 Comments

Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it’s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads – no fixed network perimeter Attack vectors based on application access patterns Risk of [...]

Microsoft Ignite 2018–Microsoft Information Protection

September 25, 2018 // 0 Comments

Speakers: Questions to Microsoft My data is scattered. I might not even know where it is. I cannoit create unified policies for my data security How do I protect PII for GDPR, etc. Microsoft Information Protection is a suite of solutions, designed from the ground up, to protect data no matter where [...]

Cloud Mechanix – “Starting Azure Infrastructure” Training Coming To Frankfurt, Germany

September 17, 2018 // 0 Comments

I have great news. Today I got confirmation that our venue for the next Cloud Mechanix class has been confirmed. So on December 3-4, I will be teaching my Cloud Mechanix “Starting Azure Infrastructure” class in Frankfurt, Germany. Registration Link. Buy Ticket About The Event This HANDS-ON [...]

Azure Management Groups

May 30, 2018 // 1 Comment

Microsoft has created a new administrative model for organisations that have many Azure subscriptions called Management Groups. With this feature, you can delegate permissions and deploy Azure Policy (governance) to lots of subscriptions at once. The contents of this post are currently in preview [...]

Azure-to-Azure Site Recovery Fails – Connection Cannot Be Established

February 20, 2018 // 1 Comment

In this post, I’ll explain how to fix the following errors when you attempt to replicate an Azure virtual machine from one Azure Region to another: Error 151072: Connection cannot be established to Azure Site Recovery service endpoints. And: Error 539: The requested action couldn’t be [...]

Amsterdam – Starting Azure Infrastructure Course

January 22, 2018 // 4 Comments

I am happy to announce that our Cloud Mechanix venture is bringing my custom-written Starting Azure Infrastructure course to Amsterdam on April 19-20. This course is intended for IT professionals and developers that wish to start working with or improve their knowledge of Azure virtual machines. [...]

Azure VMs–Block Outbound Traffic to the Internet (Updated)

January 18, 2018 // 1 Comment

In theory, it was possible to deny all outbound traffic to the Internet from an Azure VM. In theory, I can also place a loaded gun to my head, but my doctor disapproves of that. Here’s what would happen: You created an outbound rule to Deny all traffic to a service tag (location) called Internet. [...]

1 2 3 … 16 »

Aidan Finn, IT Pro

A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...