Azure WAF is a critical security service that safeguards web application from common threats and vulnerabilities. Take a look at this video to know more about its features and utilize them in your environment.
Azure Firewall Sku’s is a stateful firewall service which has built in high availability to help protect your services and applications across subscriptions and VNETs
You can deploy Azure Firewall on any virtual network, but customers typically deploy it on a central virtual network and peer other virtual networks to it in a hub-and-spoke mode.
Take a look at this video to know more about the Azure Firewall.
The security concept known as “Zero Trust” is founded on the principle “never trust, always verify” .Watch this video to learn about the essential tenets of Zero Trust and how to implement it in your environment.
Microsoft Defender for cloud is a comprehensive cloud security solution offer from Microsoft. Cloud security posture management (CSPM) and cloud workload protection platform (CNAPP). It provides security management and threat protection for resources deployed in Microsoft Entra as well as resources in other clouds such as AWS and Google Cloud Platform.
Microsoft Cloud Sync is a new solution for achieving your hybrid identity synchronizing contacts, groups, and users with Microsoft Entra ID—is Microsoft Entra Cloud Sync.
Rather than using the Microsoft Entra Connect it makes use of the Microsoft Entra cloud provisioning agent. In this article series we will take a look at the steps to migrate from Entra ID connect to Microsoft cloud sync (After detailed analysis)
We will choose only a Pilot OU on this part to see if the synchronization is getting successful for these Pilot OU.
Below are the benefits of migrating to Cloud Sync:
Config is easily managed from Azure AD portal
Cloud Sync does not require SQL server licensing (Azure AD Connect requires a SQL Server database to store identity data)
It’s a light weight agent no heavy dependencies of need to setup a local DB SQL backend
Deployment complexity & maintenance is fair less
Moving on to resiliency:
Multiple agents can be installed for parallel sync.
Whereas Azure AD connect uses Active & Staging mode to achieve some resiliency.
Regarding performance :
Its capable of performing Sequential Sync
Supports Sync to a single tenant from a multi-forest disconnected AD environments
So the question comes here first like ok this seems to be nice but I already have my environment setup and running in Azure AD connect.
What is the steps to migrate to Microsoft Cloud Sync ?
Below are the steps to do that.
First things first (Lets be very honest here )
Not all environments are capable of moving to Cloud Sync .
So we need to first evaluate any environment before choosing this option.
How do I validate ?
You can use the Microsoft setup tool by navigating to the below url
It’s been quite a while since I blogged, and since I started doing podcasts,this has been reduced a lot.This time I thought to blog something about the cool stuff in the Entra ID feature I explored in the demo and wanted to share about the same.
Today in this blog, let’s take a look at restoring a domain controller running on the Azure virtual machine from the Recovery Services vault. Recovery Services Vault is a feature provided by Microsoft Entra that offers centralized management and protection of data, applications, and workloads. One of the services offered by Recovery Services Vault is it’s backup.
We also talked about the site recovery in the previous video, and if you want to have more information on it, I highly recommend taking a look at it. In the backup part, it allows us to securely backup and recovery our applications in the event of accidental deletion , data corruption, or site failures.
An identity-aware, cloud-based security infrastructure is becoming increasingly necessary for today’s workforce as more and more data and apps move to the cloud. Security Service Edge (SSE) is a new class of network security solutions that is a stand-alone subset of Secure Access Service Edge (SASE).
SASE architecture’s main goal is to provide a seamless and secure user experience while maintaining optimal connectivity.
With Terraform, you can define your Conditional Access policies and configurations as code. This means you describe the desired state of your Azure AD Conditional Access environment in Terraform configuration files, making it version-controlled, repeatable, and easily auditable.
Take a look at this video to see more about this information
The Microsoft Sentinel Content Hub serves as a centralized hub for discovering and managing pre-built, domain-specific content, making it the ideal resource for finding new solutions or exploring data within Sentinel workspaces.
Take a look at this video to get started with Microsoft Sentinel Content Hub
I'm a Certified Microsoft Infrastructure/Cloud Architect with hands-on 17 years of International proven experience in Planning, Design, Execution, Integration, Operations, IT Management specialized in Messaging Platforms Microsoft Teams with Telephony, Skype for Business Voice, Microsoft Exchange, Intune Deployment, Microsoft Azure Infrastructure, and Cloud Security Implementations.
Over time have developed complete IT Implementation skills on Microsoft Infrastructure/Cloud projects within Multinational, Government, Construction, Leisure & Entertainment, Production, Automobile & Financial Industries.
I can be contacted through email sathish@ezcloudinfo.com or through mobile +31 62 050 6978