Cloud ON

Welcome to Danilo's blog

Trainings

Application Security Groups now generally available in all Azure regions

Microsoft Azure
We are pleased to announce the general availability of Application Security Groups (ASG) in all Azure regions. This feature provides security micro-segmentation for your virtual networks in Azure. Network security micro segmentation ASGs enable you to define fine-grained network security policies based on workloads, centralized on applications, instead of explicit IP addresses. Provides the capability to group VMs with monikers and secure applications by filtering traffic from trusted segments of your network. Implementing granular security traffic controls improves isolation of workloads and protects them individually. If a breach occurs, this technique limits the potential impact of lateral exploration of your networks from hackers. Security definition simplified With ASGs, filtering traffic based on applications patterns is simplified, using the following steps: Define your application groups, provide a moniker descriptive name that…
Read More

Azure Reference Architectures

Microsoft Azure
Azure reference architectures are arranged by scenario, with related architectures grouped together. Each architecture includes recommended practices, along with considerations for scalability, availability, manageability, and security. Most also include a deployable solution. Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/
Read More

SQL Database: Long-term backup retention preview includes major updates

Microsoft Azure
The preview for long-term backup retention in Azure SQL Database was announced in October 2016, providing you with a way to easily manage long-term retention for your databases – up to 10 years – with backups stored in your own Azure Backup Service Vault. Based upon feedback gathered during the preview, we are happy to announce a set of major enhancements to the long-term backup retention solution. With this update we have eliminated the need for you to deploy and manage a separate Backup Service Vault. Instead, SQL Database will utilize Azure Blob Storage under the covers to store and manage your long-term backups. This new design will enable flexibility for your backup strategy, and overall more control over costs. This update brings you the following additional benefits: More regional…
Read More

Introducing a new way to purchase Azure monitoring services

Microsoft Azure
Today customers rely on Azure’s application, infrastructure, and network monitoring capabilities to ensure their critical workloads are always up and running. It’s exciting to see the growth of these services and that customers are using multiple monitoring services to get visibility into issues and resolve them faster. To make it even easier to adopt Azure monitoring services, today we are announcing a new consistent purchasing experience across the monitoring services. Three key attributes of this new pricing model are: 1. Consistent pay-as-you-go pricing We are adopting a simple “pay-as-you-go” model across the complete portfolio of monitoring services. You have full control and transparency, so you pay for only what you use. 2. Consistent per gigabyte (GB) metering for data ingestion We are changing the pricing model for data ingestion from…
Read More

Azure AD Domain Services Overview – Removing the need for Domain Controllers in Azure IaaS clouds

Microsoft Azure
Late 2017 Microsoft released some very cool technology in Azure called Azure AD Domain Services.  This service provides Azure Customers with Virtual Machines in Azure the ability to use Domain Services such as Kerberos, NTLM and Group Policy lock down without the need for deploying Domain Controllers in the cloud. It is important to note, Azure AD Domain Services a paid service, once enabled in your Azure Tenancy, you will be billed monthly.  Azure AD Domain Services unlike other cloud services in Azure cannot be stopped or paused, it must be deleted from the Azure Tenancy to avoid further billing.  To understand how this service is charged, please see https://azure.microsoft.com/en-au/pricing/details/active-directory-ds/ What Azure AD Domain Services offers customers is the ability to remove the need for building domain controllers in the…
Read More

Exchange Server TLS guidance Part 2: Enabling TLS 1.2 and Identifying Clients Not Using It

Microsoft Exchange Server
Overview In part 2 of our Exchange Server TLS Guidance series we focus on enabling and confirming TLS 1.2 can be used by your Exchange Servers for incoming and outgoing connections, as well as identifying any incoming connection which is not utilizing TLS 1.2. The ability to identify these incoming connections will vary by Windows Server OS version and other factors. Part 2 will not cover disabling TLS 1.0 or TLS 1.1, nor disabling older cipher suites from being used. Part 3 of the TLS guidance series will go into detail on those topics. Assumption For Part 2 of our TLS guidance series we assume you have already audited your on-premises Exchange Servers and applied all updates called out in Part 1: Getting Ready for TLS 1.2. Please perform the…
Read More

Virtual Machine Serial Console access

Microsoft Azure
Ever since I started working on the Virtual Machine (VM) platform in Azure, there has been one feature request that I consistently hear customers asking for us to build. I don’t think words can describe how excited I am to announce that today we are launching the public preview of Serial Console access for both Linux and Windows VMs. Managing and running virtual machines can be hard. We offer extensive tools to help you manage and secure your VMs, including patching management, configuration management, agent-based scripting, automation, SSH/RDP connectivity, and support for DevOps tooling like Ansible, Chef, and Puppet. However, we have learned from many of you that sometimes this isn’t enough to diagnose and fix issues. Maybe a change you made resulted in an fstab error on Linux and…
Read More
Azure DNS Private Zones now available in public preview

Azure DNS Private Zones now available in public preview

Microsoft Azure
We are pleased to announce the public preview of DNS Private Zones in all Azure Public cloud regions. This capability provides secure and reliable name resolution for your virtual networks in Azure. Private Zones was announced as a managed preview in fall of last year. No more custom DNS server burden Private Zones obviates the need to setup and manage custom DNS servers. You can bring DNS zones to your virtual network as you lift-and-shift applications to the Azure cloud, or if you are building Cloud-Native applications. You also have the flexibility to use custom domain names, such as your company’s domain name. Name resolution across virtual networks and across regions Private zones provide name resolution both within a virtual network and across virtual networks. You can have private zones…
Read More

Beginner’s Guide to Azure Automation

Microsoft Azure
Azure Automation For Azure IAAS enthusiasts, Microsoft has provided a platform to automate all the azure services using powershell. The language is tweaked and used as “powershell workflow”. Why to Use Reducing Manual Effort and help in consistent testing Managing resources (deployment/VM’s etc) How to Use Create a powershell workflow in azure web portal and execute it. Runbook Deployment and execution of tasks written in PowerShell. Provisioning/Deployment/Maintenance/Monitoring. Things to know! Automation Account – A dedicated account to perform runbook design/execution/management. Asset – Global resources used by runbooks to assist in common tasks and value specific operations Windows PowerShell Workflow – Implementation of azure automation using PowerShell Workflows. Workflow is a group of individual steps performing an action. Management Certificates – Authenticate azure resources for azure automation in an azure subscription.…
Read More