Tag Archives: Azure Network

Allgemein, Azure, Azure Network, Azure Security, Cloud, Microsoft

Connect and Secure Azure PaaS services to Virtual Networks with Private Link

2 Comments

Azure allows to use IaaS and PaaS solution together over the same network. But all Azure PaaS services using a public interface for connection. When configure the PaaS firewall to allow traffic only from internal VNETs the public interface still exists. With Azure Private Link there is a new service to disable the public interface and add a private endpoint to secure connect to PaaS from your own VNET.

When configuring the internal service Firewall to block all traffic from outside the VNET, the Firewall make a mapping from internal VNET traffic to the Public IP and block all other IP- Adress ranges – and here comes the new Azure Service Private Link into play. This blog post will cover how Private Link works and how to configure this service for your environment including own DNS solution to get a complete private based Azure VNET.

Continue reading Connect and Secure Azure PaaS services to Virtual Networks with Private Link →
Allgemein, Azure, Azure Active Directory, Azure Security, Certifications, Cloud, Microsoft, Windows Server

How I pass the Azure Security Exam Az-500

13 Comments

In the past I have taken several Azure exams, and yesterday I took the Azure Security exam Az-500. I am really glad that I passed the exam. In this article I will give you a brief overview of the topics I saw in the exam and what materials I used to prepare for the exam. I can say directly that the best way to succeed in the exam is practice.

Continue reading How I pass the Azure Security Exam Az-500 →
Allgemein, Azure, Azure Bastion, Azure Network, Cloud, Microsoft, Remotedesktop, Windows 10, Windows Client OS, Windows Server, Windows Server 2016, Windows Server 2019

Azure Bastion – Secure Access Azure VMs via SSH/RDP without Public IP or Jumphosts

6 Comments

Update 5 on 01/12/2021

Microsoft has changed the #AzureBastion minimum subnet size from /27 to /26. Installed #Azure Bastion are unaffected, but new deployments require the new subnet size. Please remember this. https://docs.microsoft.com/en-us/azure/bastion/bastion-faq#subnet

Update 4 on 14/07/2021

Microsoft has announced a new Azure Bastion Standard SKU as part of the ongoing Microsoft Inspire 2021. The difference between Basic and Standard SKU and the deployment process are summarized in this article.

Update 3 on 16/05/2021

VNET peering support for Azure Bastion is now GA

Update 2 on 26/04/2021

I updated the article based on the latest information around Azure Bastion. One big announcement is the support for peered VNETs for Azure Bastion – this is also integrated in this article. Please feel free to share and comment 🙂

Azure Bastion is a new service to reaches Azure VMs in a secure way without needing a Jump host in the same VNET or to publish an Public IP for a VM. Many customers using Public IPs to reach VMs (Windows and Linux) in Test and Dev environment. Please avoid managing Azure VMs over a Public IP, this is unsecure – use Azure Bastion.

Azure Bastion is in public preview since end of June 2019. Azure Bastion is General Available (since Microsoft Ignite 2019) and many limitations are gone. This article will short introduce the service, the new features and how easy is it to enroll the service in the environment to reach Azure VMs (Windows or Linux) over a secure way.

Azure Bastion architecture from MS docs
Azure Bastion architecture from MS docs
Continue reading Azure Bastion – Secure Access Azure VMs via SSH/RDP without Public IP or Jumphosts →
Allgemein, Azure, Azure Bastion, Cloud, Community, Events, Microsoft

Azure Advent Calendar Session about Azure Bastion

3 Comments
Azure Advent Calender Azure Bastion session
Azure Advent Calender Azure Bastion session

Hi folks, we are in the end of the year and many advent calendars are running right now. One great idea came from Robert and Gregor, they founded the Azure Advent Calendar. A calendar with Azure session about different services. Every day will be released 3 sessions to different topics in Azure. There are many contents available now. So thanks Robert and Gregor for this great initiative.

I´m happy to contribute with a session about Azure Bastion. A secure way to access your Azure VMs without need for a Jump host or to bind a public IP-Address to a server.

Continue reading Azure Advent Calendar Session about Azure Bastion →
Allgemein, Azure, Azure Bastion, Azure Network, Azure Security, Cloud, Community, Events, Microsoft

Azure Saturday Cologne 2019 – Azure Bastion Slides

1 Comment

Gestern fand der erste Azure Saturday in Köln statt. Organisiert wurde dieser von Jennifer, Raphael und Martin und es war ein gelungener Auftakt. Eine tolle Orga und eine absolut hervoragende Location bei der Gothar sorgten für einen gelungene Veranstaltung. Dazu noch viele verschiedene Speaker und eine große Themenbandbreite, die für viel Austausch und Networking sorgten.

  • Azure Saturday Cologne – Daniel Neumann Azure Kubernetes
  • Azure Saturday Cologne Orga Raphael und JenniIMG_20191207_103939
    Azure Saturday Cologne Orga Raphael und JenniIMG_20191207_103939
  • Azure Saturday Cologne – Community Mittag
  • Azure Saturday Cologne – Ending

Am Nachmittag durfte ich mit zwei Sessions selbst einen kleinen Teil zum Azure Saturday Cologne beitragen.

Continue reading Azure Saturday Cologne 2019 – Azure Bastion Slides →