Category Archives: Azure Security

Allgemein, Azure, Azure Arc, Azure Governance, Azure Security, Cloud, Community, Defender for Cloud, Events, Microsoft, Windows Server 2025

Speaking at NICConf 2024 in Oslo about Microsoft Defender for CSPM and Hybrid Cloud with WS2025, Azure Arc and WAC

Leave a comment

I´m thrilled to announce that I have been invited to the Nordic Infrastructure Conference in Oslo, the NICconf, for the second time.

NICconf is a two-day event in the heart of Oslo with around 3000 particioants, focusing on Microsoft technologies such as Azure, Hybrid Cloud, Identity and Security. There will also be a pre-day organized where attendees can participate in different masterclasses (full day workshops). There will be a masterclass by Paula Januszkiewics or Mikael Nyström and Viktor Hedberg,

Continue reading Speaking at NICConf 2024 in Oslo about Microsoft Defender for CSPM and Hybrid Cloud with WS2025, Azure Arc and WAC →
Allgemein, Azure Active Directory, Azure Security, Cloud, Microsoft, Zero Trust

Microsoft enforces MFA requirements for user login to Azure portal for all tenants

Leave a comment

Password spray attacks on accounts have increased rapidly in recent months. As a result, the security risks for accounts that do not use MFA for authentication have increased significantly. Microsoft works in the past on different ways to enable MFA for all users they work with Azure and Microsoft 365. One first try was the activation of security defaults, but this can be deactivated by user.

Based on this development and for other reason Microsoft announced the enforcement for Mutlifactor authentication for all sign-in/access to the Azure Portal. This announcement was a little suprise and bringe some challenges to organization espesically when we take a look at service principals and break glass accounts. Don´t get me wrong, it is mandatory to enable MFA for all users they access your tenant and have a valid and regulary reviewed Conditional Access policy in place. But for some special accounts this was not the focus or recommended. In this article I will explain how Microsoft rollouts this enforcement which steps you have to proof and how you can ensure that you are not affected or prepared for the upcoming changes.

Continue reading Microsoft enforces MFA requirements for user login to Azure portal for all tenants →
Allgemein, Azure, Azure Security, Cloud, Community, Defender for Cloud, Microsoft

Awarded as Defender for Cloud Champion and as Community Advocate 2024

Leave a comment

The Microsoft Security Community programm continues to grow and there are many exiting new features and additional previews coming to live. I´m working on some of the new previews to gain insights and provide feedback and there are really great new offerings coming.

I`m happy to share that I was awarded as Defender for Cloud Champion and as Community Advocate 2024.

Continue reading Awarded as Defender for Cloud Champion and as Community Advocate 2024 →
Allgemein, Azure Security, Azure VM, Cloud, Defender for Cloud, Microsoft, Windows Server, Zero Trust

Enable granular pricing for Defender for Servers P1 or P2 on specific resources within your subscription via API/Powershell

Leave a comment

Microsoft model for a scalable Cloud Adtoption is based on the Enterprise Scale Architecture and I think this is a scalable and useful modell for every customer that uses Azure ressources. It´s based on the definition to granulary devide the workloads in different subscriptions and gives via Management Groups the possibility to group this differnent subscription into workload groups like Development, Core, etc. I know many customers struggle with this model and mistakenly think that Enterprise Scale is a reference to Enterprise customers, but this is not the case.

Based on the Enterprise Scale Architecture some services and security features can only be activated on subscription level to guarante that each resource inside the subscription is secured. This basis makes it even more important for customers to consider the Enterprise Scale Architecture or to orient themselves towards it.

The Microsoft Defender for Cloud and especially the Defender for Server P1 and P2 plans can only be activated on subscription level in the past. Microsoft has decided to change this and now allow plans to be activated at resource level (per server). It is important to understand that the principled approach activating on Subscription Level and the Enterprise Scale architecture are still valid and needed and this possibility is only a concession to cover certain requirements:

  • manage security configurations at a lower hierarchy level
  • flexibility for excluding specific resources (VMs) inside the subscription
  • enable different plans on subscription because for implementation of Enterprise Scale approach
Continue reading Enable granular pricing for Defender for Servers P1 or P2 on specific resources within your subscription via API/Powershell →
Allgemein, Azure Security, Cloud, Defender for Cloud, Microsoft, Zero Trust

Microsoft Defender for CSPM is GA – Information about activation, billing and new pricing information

Leave a comment

Microsoft announced with Defender for Cloud Security Posture Management a new plan in the Defender for Cloud product family which focuses on a central view on the security posture of the customer.

In this article I will give a overview about which topics Defender for CSPM covers, how it will be enabled and how the pricing is actual working which holds some suprises if Defender for Servers is already in use.

Continue reading Microsoft Defender for CSPM is GA – Information about activation, billing and new pricing information →
Allgemein, Azure, Azure Security, Cloud, Community, Events, Microsoft, Windows Server 2019, Windows Server 2022

Speaking at Experts Live Netherlands 2023 about Mastering Defender for Servers

Leave a comment

I´m really happy to announce that I will speak at the Experts Live Netherlands 2023 Spring edition. The last one was the 10th annivesary edition in Fall last year. The Experts Live Netherlands is one of the biggest Experts Live conferences next to Experts Live Europe and because of the big Experts Live Europe will take place this year in autumn, the Orga Team decided to organize the 11 edition in spring.

Contents [show]

Session overview

This year, my session will be about the Mastering Defender for Servers. In this session I will focus on Defender for Servers to protect servers across hybrid and multicloud environments. So I dived into the different plans, feature sets, deployment methods and more. Futhermore I show as a side note the new Defender for CSPM Plan and explore how agentless scan methods works. Deploy defender for servers at scale will complete the view and enable the attendees to mastering defender for servers.

Motivation

I like the idea behind the Experts Live community and really looking forward to see many community members there, greats friends again and certainly make new contacts.
This year the edition is with 1,200 registrations sold out. The Keynote will be held by Dona Sarkar. So it is worth to be there

About Experts Live Netherlands

Experts Live is an international Microsoft community platform focusing on knowledge sharing through live events.

Every year Experts Live Netherlands organizes a large-scale one-day event where more than 1200+ IT Pros and Developers gain knowledge of Microsoft technology. National and international community experts update visitors on the latest Microsoft technologies in one day.

Slides

It was a pleasure to speak at 11th edition of the Experts Live Netherlands. With more then 1200 attendees is was one of my biggest in-person conferences in the last couple of months. Thanks to the organizers and sponsors who made this possible!

You can find the slides from my talk about Mastering Defender for Servers here. Please keep in mind that this slides was only for the Experts Live Event and I will improve the session based on the Feedback from the attendees.

Allgemein, Azure, Azure Network, Azure Security, Cloud, Microsoft, Zero Trust

Azure Firewall Basic SKU is now GA

Leave a comment

Microsoft announces with the Azure Firewall Standard and Premium two native Firewall Services available as PaaS solution what are a great benefit to classic Firewall deployments, because of native Autoscaling Features, no need for VM Management and more. Unfortunately the price was to high for SMBs, with 900€ for the Standard and over 1200€ for the Premium Edition. A frequently requested Features, was a cheaper variant aimed at small and medium businesses.

This wish has been answered and last year October with the Azure Firewall Basic edition (public preview). The Azure Firewall Basic (AzFw Basic) has leaved the Public Preview and are now GA. The planned subscription must first be prepared before the deployment can begin with some Powershell commands.

Now Azure offers three different Azure Firewall solutions. The following table list the different SKUs and the price for using in West Europe (03/2023).

Microsoft has made some changes to deploy the Firewall Basic compared to the Firewall Standard and Premium SKU for better Service avalability. This article will give you a short overview of this changes.

Continue reading Azure Firewall Basic SKU is now GA →
Allgemein, Azure, Azure Security, Cloud, Microsoft, Zero Trust

How I successfully passed the MS Defender for Cloud Ninja training and how the security community helped me

1 Comment

One of my goal this year was to work more and more with the Microsoft security solutions and got deeper into the different services and possibilities. My focus on this is to get a better understanding how we can secure our Hybrid Cloud environment with the different Microsoft defender products.

About the Microsoft Security Community

Continue reading How I successfully passed the MS Defender for Cloud Ninja training and how the security community helped me →
Allgemein, Azure, Azure Arc, Azure Automanage, Azure Security, Cloud, Community, Events, Microsoft, Windows Admin Center, Windows Server 2016, Windows Server 2019, Windows Server 2022

Speaking at Cloud Brew 2022 about Azure Arc

Leave a comment

After many hybrid events in the last few years I really like to get back to in-person or hybrid events to see the community live at the events and discuss and learn from each other about different projects and meet some new people.

About the Cloud Brew

One of my favorite conference in 2019 was the Cloud Brew in Belgium, it was a great conference because of different things:

  • Great list of speakers and sessions
  • Deep dive technical sessions
  • Big community from around europe
  • One of the biggest Azure related conference in belgium
  • Great place in the beautiful former brewery Lamot

The Cloud Brew 2022 will take place from 18/11/ – 19/11/2022 in Lamot, Mechelen in Belgium. There are some free seats available.

About my session

Continue reading Speaking at Cloud Brew 2022 about Azure Arc →
Allgemein, Azure, Azure Arc, Azure Automanage, Azure Network, Azure Security, Azure VM, Cloud, Microsoft

My favorite Microsoft Ignite 2022 Fall Highlights

1 Comment

After the pandemic beguns Microsoft switched the both big conference Microsoft Build and Microsoft Ignite to virtual only events. The Ignite was two times a year in 2020 and 2021. For 2022 it was long time not clear will it go back to an in-person event or still stay as a virtual event.

The Microsoft Ignite 2022 has start 2 hours ago as an hybrid event delivered from Seattle with 6 Spotlight events around the globe and delivered as before virtually. I’m a little disappointed because a lot of the content is pre-recorded and even great speakers like Donovan Brown don’t hold their sessions live in Seattle but are only shown there virtually as well.

In this article I will share the important announcements from my perspective from the Microsoft Ignite 2022. Most of you know me as an Azure Governance, (Hybrid) Infrastructure and Security guy, so please forgive me for focusing on these things.

Continue reading My favorite Microsoft Ignite 2022 Fall Highlights →