#AzureSecurity Network Security Techniques for Azure #NSG #NVA #UDR #VPN #ExpressRoute #NTierArchitecture

…Microsoft Azure platform allows customers to seamlessly extend their infrastructure into the cloud and build multi-tier architectures. Additionally, third parties can enable enhanced capabilities by offering security services and virtual appliances. This white paper provides an overview of security and architectural issues that customers should consider … It also covers creating more secure services in Azure virtual networks…

Read more here...

“…The following logic chart can direct you to a specific example of the many security techniques available with the Azure platform. For quick reference, find the example that best fits your case. For expanded explanations, continue reading through the paper….”

azurenetworksecurityflowchart

 

Example 1: Build a perimeter network (also known as DMZ, demilitarized zone, or screened subnet) to help protect applications with network security groups (NSGs).
Example 2: Build a perimeter network to help protect applications with a firewall and NSGs.
Example 3: Build a perimeter network to help protect networks with a firewall, user-defined route (UDR), and NSG.
Example 4: Add a hybrid connection with a site-to-site, virtual appliance virtual private network (VPN).
Example 5: Add a hybrid connection with a site-to-site, Azure VPN gateway.
Example 6: Add a hybrid connection with ExpressRoute.

Bye Bye Azure RemoteApp your time is up…All Hail Citrix XenApp express #RIP_RemoteApp #Sunset

“…In a surprising move, Microsoft have announced that they are sunsetting Azure RemoteApp in favour of Citrix XenApp “express” on August 31st, 2017C…”

” … Customers have provided us consistent feedback that they want a comprehensive, end-to-end, cloud-based solution for delivering Windows apps. The best way for us to deliver this is with Citrix through XenApp “express”, currently under development. XenApp “express” combines the simplicity of application remoting and the scalability of Azure with the security, management, and performance benefits of XenApp, to deliver Windows applications to any employee on any device…”

“…Given this, we will gradually wind down the delivery of Azure RemoteApp over the next year. We are absolutely committed to ensuring our existing Azure RemoteApp customers have a smooth transition. Additional options for customers include moving to a hosted solution through one of our many hosting partners, as well as Remote Desktop Services deployed on Azure IaaS…”

#HotTopic #AzureUpdate – VNET Peering | Public #ChristmasEarly

“…VNet Peering provides the ability to link two Virtual Networks in the same geo region directly. It allows Virtual Machine resources in both the VNets to connect directly through private IP addresses as if it were part of the same network. VNet peering achieves this by routing packets between the Virtual Networks through the internal Azure backbone network and thus does not involve any gateway in the path. This allows for a low latency, high bandwidth connection between the Virtual Machines in the VNets. VNet peering also allows transit through the peered VNets, thus a Network Virtual Appliance or a VPN gateway in one VNet can be used by a Virtual Machine in another peered VNet. Peering will work across VNets in different subscriptions and between an ARM (V2) and ASM (V1) VNet. It does not work between two ASM VNets….”  http://bit.ly/2awjIRe

Azure Cloud Architect Boot Camp – Onboarding Track #CSP

Join the conversation at the Azure Cloud Architect Boot Camp Yammer group

“…Course content has been developed, and will be presented, by senior Microsoft Solution Architects, Engineering, Azure Circle of Excellence (CoE) team and Customer Advisory Team (CAT). There will be a mix of presentations, case study workshops, hackathons, and Q&A panels…”

AzureArchitectBootCamp-Onboarding

 

#Azure – Design your application for High Availability #AvailabilitySet #LoadBalancer #FD #UD #CSP

Follow best practices when you design your application for high availability….

To reduce the impact of downtime due to one or more of these events, we recommend the following high availability best practices for your virtual machines:

https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-windows-manage-availability/

#AllAbout Integrating #AzureAD with OnPremAD – #ADConnect #O365 #CSP

In a nutshell Azure AD Connect is what will be required to integrate on-premises directories with Azure Active Directory, which is the identity and access management service used by Office365 Services; this will allow users to access Office365 services using their on-premises AD credentials.

There are several more advanced topics to cover different on-prem directory scenarios, but below are almost the basic min level of understanding required; everything else will build on these base concepts … advanced topics will be covered in another post.

This one gets my Goat… #Premises

ITS-PREMISES

http://en.wikipedia.org/wiki/On-premise_software
“…On-premise software, is a common, although incorrect name for on-premises software. On-premises software is installed and run on computers on the premises (in the building) of the person or organisation using the software, rather than at a remote facility, such as at a server farm somewhere on the internet…
…. Grammatically, the correct term is ‘on-premises’ software, because the word premises does not have different singular and plural forms. Irrespective of correctness, however, ‘on-premise’ is sometimes used…”

Redmond here I come :) – “Your registration for the Azure Cloud Architect Boot Camp has been approved” #CSP_Partners #CSP

This event is the same high quality technical training that internal Microsoft architect roles attend and it is now being extended to “elite and exclusive Microsoft partners in Western Europe, France, Germany, United Kingdom, United States, and Canada.

The Azure Cloud Architect Boot Camp is a five-day immersive learning experience that includes general lecture sessions, case study workshops, executive panels, and hackathons – all delivered in partnership with Microsoft Engineering.

Sessions and topics such as the following will be covered: Azure storage, compute, Hybrid Net, Azure SDN, Recovery, Identity & Access Management, Service Fabric, IaaS under Azure resources, Dev Ops, App services, Machine Learning, R server, Cortana Analytics, Power BI, SQL DB, Azure Document DB, Azure Data Lake, Messaging, Event Hub, Stream Analytics, IoT, security and compliance, HPC, Azure Batch, Big Compute, Media Services, and Cloud Design Patterns.

Who should attend?

The Azure Cloud Architect Boot Camp is L300-L400 technical training exclusively oriented to those in “architect” roles at partner organizations who have advanced knowledge on Azure workloads. The training is NOT appropriate for those with only basic or intermediate knowledge of Azure.

AzureArchitectBootCamp

 

 

 

#Azure 101 Blob Storage…To Block or Page that is the question #Blob #Object #AzureStorage

..Block blobs are optimized for streaming and storing cloud objects, and are a good choice for storing documents, media files, backups etc…..

Page blobs are optimized for representing IaaS disks and supporting random writes, and may be up to 1 TB in size. An Azure virtual machine network attached IaaS disk is a VHD stored as a page blob

Blob Storage stores unstructured object data. A blob can be any type of text or binary data, such as a document, media file, or application installer. Blob storage is also referred to as Object storage.

https://azure.microsoft.com/en-gb/documentation/articles/storage-introduction/

Azure Cloud Architect Boot Camp – Redmond August 1-5 2016

Looking forward to this……AzureArchitectBootCampThis event is the same high quality technical training that internal Microsoft architect roles attend and it is now being extended to “elite and exclusive” Microsoft partners in Western Europe, France, Germany, United Kingdom, United States, and Canada.

The Azure Cloud Architect Boot Camp is a five-day immersive learning experience that includes general lecture sessions, case study workshops, executive panels, and hackathons – all delivered in partnership with Microsoft Engineering.

Sessions and topics such as the following will be covered: Azure storage, compute, Hybrid Net, Azure SDN, Recovery, Identity & Access Management, Service Fabric, IaaS under Azure resources, Dev Ops, App services, Machine Learning, R server, Cortana Analytics, Power BI, SQL DB, Azure Document DB, Azure Data Lake, Messaging, Event Hub, Stream Analytics, IoT, security and compliance, HPC, Azure Batch, Big Compute, Media Services, and Cloud Design Patterns.

Who should attend?

The Azure Cloud Architect Boot Camp is L300-L400 technical training exclusively oriented to those in “architect” roles at partner organizations who have advanced knowledge on Azure workloads. The training is NOT appropriate for those with only basic or intermediate knowledge of Azure.

 

#Azure101 How to install and configure #Azure #PowerShell

What is Azure PowerShell?

Azure PowerShell is a set of modules that provide cmdlets to manage Azure with Windows PowerShell. You can use the cmdlets to create, test, deploy, and manage solutions and services delivered through the Azure platform. In most cases, the cmdlets can be used for the same tasks as the Azure Management Portal, such as creating and configuring cloud services, virtual machines, virtual networks, and web apps…..

https://azure.microsoft.com/en-us/documentation/articles/powershell-install-configure/

 

#Azure101 Azure subscription and service limits, quotas, and constraints

“This document specifies some of the most common Microsoft Azure limits. Note that this does not currently cover all Azure services. Over time, these limits will be expanded and updated to cover more of the platform.

Note: If you want to raise the limit above the Default Limit, you can open an online customer support request at no charge. The limits cannot be raised above the Maximum Limit value in the tables below. If there is no Maximum Limit column, then the specified resource does not have adjustable limits.”

https://azure.microsoft.com/en-gb/documentation/articles/azure-subscription-service-limits/

#Azure101 Sizes for Azure virtual machines #Windows #Linux #Azure #VM

Linux Virtual Machine Sizes

“This article describes the available sizes and options for the Azure virtual machines you can use to run your Linux apps and workloads. It also provides deployment considerations to be aware of when you’re planning to use these resources. For information about pricing of the various sizes, see Virtual Machines Pricing. This article is also available for Windows virtual machines….”

https://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-linux-sizes/

 

Windows Virtual Machine Sizes

“This article describes the available sizes and options for the Azure virtual machines you can use to run your Windows apps and workloads. It also provides deployment considerations to be aware of when you’re planning to use these resources. For information about pricing of the various sizes, see Virtual Machines Pricing. This article is also available for Linux virtual machines…”

https://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-windows-sizes/

 

 

#Azure101 About disks and VHDs for Azure virtual machines #Linux #Azure #VM #VHD

“All Azure virtual machines have at least two disks – a Linux operating system disk (in the case of a Linux VM) and a temporary disk. The operating system disk is created from an image, and both the operating system disk and the image are actually virtual hard disks (VHDs) stored in an Azure storage account. Virtual machines also can have one or more data disks, that are also stored as VHDs…”

About disks and VHDs for Azure virtual machines
https://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-linux-about-disks-vhds/

#Azure101 Upload Windows VHD to Azure #HyperV #Hybrid #ARM

This article shows you how to upload a virtual hard disk (VHD) with a Windows operating system so that you can use it to create new Windows virtual machines (VMs) by using the Azure Resource Manager deployment model. For more details about disks and VHDs in Azure, see About disks and VHDs for virtual machines.

https://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-windows-upload-image/

#Azure SQL Database options and performance: Understand what’s available in each service tier #AzureSQL

Azure SQL Database has multiple service tiers to handle different workloads. You can change service tiers at any time with zero downtime to your application. You can also create a single database with defined characteristics and pricing. Or you can manage multiple databases by creating an elastic database pool. In both cases, the tiers include Basic, Standard, and Premium. Database options in these tiers are similar for single databases and elastic pools, but there are additional considerations for elastic pools. This article provides detail of service tiers for single databases and elastic databases.

https://azure.microsoft.com/en-gb/documentation/articles/sql-database-service-tiers/?rnd=1

sql-database-service-tiers-table

Transfer data with the #AzCopy Command-Line Utility #Azure #Storage #Blob

https://azure.microsoft.com/en-gb/documentation/articles/storage-use-azcopy/

Overview

AzCopy is a Windows command-line utility designed for copying data to and from Microsoft Azure Blob, File, and Table storage using simple commands with optimal performance. You can copy data from one object to another within your storage account, or between storage accounts…

The basic syntax for AzCopy commands is:
AzCopy /Source: /Dest: [Options]

 

 

 

Step-by-Step Remote Desktop Services on Windows Azure #Daas #RDS #Azure #CSP

Courtesy

Step-by-Step: Remote Desktop Services on Windows Azure – A cost-effective alternative to Desktop as a Service ( Part 1)

https://blogs.technet.microsoft.com/keithmayer/2013/08/27/step-by-step-remote-desktop-services-on-windows-azure-a-cost-effective-alternative-to-desktop-as-a-service-part-1/

Step-by-Step: Remote Desktop Services on Windows Azure – A cost-effective alternative to Desktop as a Service ( Part 2 )

https://blogs.technet.microsoft.com/keithmayer/2013/09/19/step-by-step-remote-desktop-services-on-windows-azure-a-cost-effective-alternative-to-desktop-as-a-service-part-2/

#Azure101: #AzureExpressRoute Essential Guide

‘MS Guide – Microsoft Azure ExpressRoute Technical Overview – Michael Washam’

Summary: “Microsoft Azure ExpressRoute makes it easy to establish dedicated and private circuits between your data center and Microsoft Azure. ExpressRoute connections do not go over the public Internet and offer more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet. This guide explains ExpressRoute and its uses, compares provider models, and walks you through the workflow and deployment steps…”

ExpressRouteGuide

Credit Michael Washam…
Comparing ExpressRoute Provider Models
There are two types of providers you can choose from when using ExpressRoute: Connecting through an Exchange Provider (IXP) or a Network Service Provider (Telco).

ExpressRoute#2ExpressRoute#3

ExpressRoute#1