Azure Network Security Ninja Training

Published May 14 2021 02:17 PM 47K Views
Microsoft

Last updated on October 6, 2021

 

In this blog post, we will walk you through basic to advanced scenarios for Azure network security. Ready to become an Azure NetSec ninja? Dive right in!

 

Check back here routinely, as we will keep updating this blog post with new content as it becomes available.

 

Anything in here that could be improved or may be missing? Let us know in the comments below, we’re looking forward to hearing from you.

 

Highlight of the Month: Azure Firewall Solution for Azure Sentinel: New Detections, Hunting Queries and Response Automation

The Azure Firewall Solution provides new threat detections, hunting queries, a new firewall workbook and response automation as packaged content. This enables you to find the appropriate solution easily and then deploy all the components in the solution in a single step from the Solutions blade in Azure Sentinel.

 

Azure Network Security Ninja Training SectionsAzure Network Security Ninja Training Sections

1       The Basics

 

1.1     Introduction to network security concepts

 

This module introduces general concepts of network and web application security.

 

1.1.1    Network security in Azure

Be familiar with network security concepts and ways you can achieve a secure network deployment in the Azure cloud.

 

1.1.2    Web application protection in Azure

Be familiar with web application protection concepts and ways you can achieve a secure web application deployment in the Azure cloud.

 

1.2     Introduction to Azure network security products

 

Do you prefer videos? Check out the Introduction to Azure Network Security (50 minutes) webinar, which covers all products listed individually below. You can also quickly browse through the contents of the presentation deck

 

1.2.1    Azure DDoS Protection Standard

Azure DDoS Protection Standard, combined with application design best practices, provides enhanced DDoS mitigation features to defend against DDoS attacks.

 

For more information, check the Azure DDoS Protection Standard documentation.

MS Learn Training Material: Azure DDoS Protection Standard (35 minutes)

This MS Learn module will show you how to guard your Azure services from a denial-of-service attack using Azure DDoS Protection Standard.

 

1.2.2    Azure Firewall and Azure Firewall Manager

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

 

For more information, check the Azure Firewall documentation

 

Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters.

 

For more information, check the Azure Firewall Manager documentation.

MS Learn Training Material: Azure Firewall and Azure Firewall Manager (40 minutes)

This MS Learn module will describe how Azure Firewall protects Azure Virtual Network resources, including the Azure Firewall features, rules, deployment options, and administration with Azure Firewall Manager.

 

1.2.3    Azure Web Application Firewall (WAF)

Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. You can deploy WAF on Azure Application Gateway or WAF on Azure Front Door.

 

For more information, check the Azure Web Application Firewall (WAF) documentation.

MS Learn Training Material: Azure Web Application Firewall (WAF) (40 minutes)

This MS Learn module will show how Azure Web Application Firewall protects Azure web applications from common attacks, including its features, how it’s deployed, and its common use cases.

 

2       Architecture and Deployments

 

2.1     Standalone Deployments

 

2.1.1    Azure DDoS Protection Standard

When deploying Azure DDoS Protection Standard, keep in mind that public IPs in ARM-based VNETs are currently the only type of protected resource. PaaS services (multitenant) are not supported for Azure DDoS Protection Standard SKU at this time. For these services, the default DDoS Protection Basic SKU applies.

The main steps to deploy Azure DDoS Protection Standard are:

Do you prefer videos? Check out the Getting started with Azure Distributed Denial of Service (DDoS) Protection (60 minutes) webinar. You can also quickly browse through the contents of the presentation deck.   

 

2.1.2    Azure Firewall

You can choose to deploy Azure Firewall Standard SKU or Azure Firewall Premium SKU (currently in Public Preview). Check the documentation below to get an understanding of their feature differences:

During your planning stages, it’s also a good idea to refer to the known issues for these products. Being aware of these known issues will save you time and stress when deploying your Azure Firewall.

 

Deploy and configure Azure Firewall using the Azure portal

 

Azure Firewall logs and metrics

 

Integrate Azure Firewall with Azure Standard Load Balancer

 

Use Azure Firewall to protect Azure Kubernetes Service (AKS) Deployments

 

Azure Firewall DNS settings

 

Azure Firewall in forced tunneling mode

Do you prefer videos? Check out the Manage application and network connectivity with Azure Firewall (50 minutes) webinar. You can also quickly browse through the contents of the presentation deck.

 

You can also check out this Azure Firewall Deep Dive on Youtube (82 minutes). It covers almost everything you need to know!

2.1.1    Azure Web Application Firewall (WAF)

 

2.2     Advanced Deployments

 

2.2.1    On-Prem Hybrid

 

2.2.2    vWAN (Secured Virtual Hub)

 

2.2.3    vWAN (Secured Virtual Hub) with 3rd party SECCaaS

 

2.2.4    Hub and Spoke

 

2.2.5    Forced Tunneling with 3rd party NVAs

 

2.2.6    Multi-product combination in Azure

 

2.2.7    TLS Inspection on Azure Firewall

Do you prefer videos? Check out the Content Inspection Using TLS Termination with Azure Firewall Premium (50 minutes) webinar. You can also quickly browse through the contents of the presentation deck. 

 

2.2.8    Per-Site or Per-URI WAF policies on Azure Application Gateway

Do you prefer videos? Check out the Using Azure WAF Policies to Protect Your Web Application at Different Association Levels (50 minutes) webinar. You can also quickly browse through the contents of the presentation deck. 

 

3       Operations

 

3.1     Centralized Management

 

3.1.1    Azure Firewall Manager and Firewall Policy

Do you prefer videos? Check out the Getting started with Azure Firewall Manager (35 minutes) webinar. You can also quickly browse through the contents of the Azure Firewall Manager presentation deck

 

3.1.2    Web Application Firewall (WAF) Policy

 

3.2     Optimizing

 

3.2.1    Web Application Firewall (WAF) tuning

Do you prefer videos? Check out the Boosting your Azure Web Application (WAF) deployment (45 minutes) webinar. You can also quickly browse through the contents of the presentation deck. 

 

3.3     Governance

 

3.3.1    Built-in Azure Policies for Azure DDoS Protection Standard

 

3.3.2    Built-in Azure Policies for Azure Web Application Firewall (WAF)

 

3.3.3    Restrict creation of Azure DDoS Protection Standard plans with Azure Policy

If you are looking to prevent unplanned or unapproved costs associated with the creation of multiple DDoS plans within the same tenant, check out this Azure Policy template. This policy denies the creation of Azure DDoS Protection Standard plans on any subscriptions, except for the ones defined as allowed.

 

3.4     Responding

 

3.4.1    Azure Web Application Firewall (WAF)

This Logic App Playbook for Sentinel will add the source IP address passed from the Sentinel Incident to a custom WAF rule blocking the IP. For a more comprehensive description of this use case, check our blog post Integrating Azure Web Application Firewall with Azure Sentinel.

 

3.4.2    Azure DDoS Protection Standard

During an active access, Azure DDoS Protection Standard customers have access to the DDoS Rapid Response (DRR) team, who can help with attack investigation during an attack and post-attack analysis.

This DDoS Mitigation Alert Enrichment template will alert administrators of a DDoS event, while adding essential information in the body of the email for a more detailed notification.

 

4       Integrations

 

Using Azure Sentinel with Azure Web Application Firewall

You can integrate Azure WAF with Azure Sentinel for security information event management (SIEM). By doing this, you can use Azure Sentinel’s security analytics, playbooks and workbooks with your WAF’s log data.

In this blog post, we cover in further detail how to configure the log connector, query logs, generate incidents, and automate responses to incidents.

 

Using Azure Sentinel Solutions for Azure Firewall

The Azure Firewall Solution provides new threat detections, hunting queries, a new firewall workbook and response automation as packaged content. This enables you to find the appropriate solution easily and then deploy all the components in the solution in a single step from the Solutions blade in Azure Sentinel.

In this blog post, we cover in further detail how automate detections and response for Azure Firewall events using Azure Sentinel.

 

5       Hands-on Labs

 

Network Security Demo lab: Azure pre-configured test deployment kit for POC is available in this repository.  You can use this lab to validate Proof of Concepts for the different Network security products. You can find more information on set up and demo in the NetSec POC blogpost

WAF Attack test lab: Set up a Web Application Firewall lab environment to verify how you can identify, detect and protect against suspicious activities in your environment. This blogpost provides steps to protect against potential attacks and you can deploy the template from Github.

 

Interactive Guide: If you cannot set up a lab environment, you can still get a hands-on experience with our Azure network security interactive guide. In this guide, we will show you how you can protect your cloud infrastructure with Azure network security tools.

 

6       Resource References

 

Register for upcoming webinars or watch recordings of past webinars in our Microsoft Security Community!

Check out and be sure to contribute with our Azure Network Security samples in GitHub!

Check out our Azure Network Security blog posts in our Tech Community!

Provide feedback and ideas about Azure products and features in our Azure Feedback portal!

 

5 Comments
Senior Member

Interesting.
Thank you.

Microsoft

Another great article Camila, keep sharing your knowledge with the community

Senior Member

Great content, well structured. Thank you

Microsoft

Great Content & Great Effort in putting this together. I think adding in Azure Front Door should make it more complete

Occasional Contributor

@camilamartins  Great work. This really useful.

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2356915%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2356915%22%20slang%3D%22en-US%22%3E%3CP%3EInteresting.%3CBR%20%2F%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2359270%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2359270%22%20slang%3D%22en-US%22%3E%3CP%3EAnother%20great%20article%20Camila%2C%20keep%20sharing%20your%20knowledge%20with%20the%20community%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2382424%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2382424%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20content%2C%20well%20structured.%20Thank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2389706%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2389706%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20Content%20%26amp%3B%20Great%20Effort%20in%20putting%20this%20together.%20I%20think%20adding%20in%20Azure%20Front%20Door%20should%20make%20it%20more%20complete%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2542213%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2542213%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F629915%22%20target%3D%22_blank%22%3E%40camilamartins%3C%2FA%3E%26nbsp%3B%20Great%20work.%20This%20really%20useful.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2356101%22%20slang%3D%22en-US%22%3EAzure%20Network%20Security%20Ninja%20Training%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2356101%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3ELast%20updated%20on%20October%206%2C%202021%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20this%20blog%20post%2C%20we%20will%20walk%20you%20through%20basic%20to%20advanced%20scenarios%20for%20Azure%20network%20security.%20Ready%20to%20become%20an%20Azure%20NetSec%20ninja%3F%20Dive%20right%20in!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECheck%20back%20here%20routinely%2C%20as%20we%20will%20keep%20updating%20this%20blog%20post%20with%20new%20content%20as%20it%20becomes%20available.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnything%20in%20here%20that%20could%20be%20improved%20or%20may%20be%20missing%3F%20Let%20us%20know%20in%20the%20comments%20below%2C%20we%E2%80%99re%20looking%20forward%20to%20hearing%20from%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%20style%3D%22background-color%3A%20cee2fc%3B%22%3E%0A%3CTD%20style%3D%22text-align%3A%20center%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%20x-large%3B%22%3E%3CSTRONG%3EHighlight%20of%20the%20Month%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fnew-detections-hunting-queries-and-response-automation-in-azure%2Fba-p%2F2688746%22%20target%3D%22_self%22%3EAzure%20Firewall%20Solution%20for%20Azure%20Sentinel%3A%20New%20Detections%2C%20Hunting%20Queries%20and%20Response%20Automation%3C%2FA%3E%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%20style%3D%22background-color%3A%20e9ecf0%3B%22%3E%0A%3CTD%20style%3D%22background-color%3A%20e9ecf0%3B%22%3E%3CP%20style%3D%22text-align%3A%20justify%3B%22%3EThe%20Azure%20Firewall%20Solution%20provides%20new%20threat%20detections%2C%20hunting%20queries%2C%20a%20new%20firewall%20workbook%20and%20response%20automation%20as%20packaged%20content.%20This%20enables%20you%20to%20find%20the%20appropriate%20solution%20easily%20and%20then%20deploy%20all%20the%20components%20in%20the%20solution%20in%20a%20single%20step%20from%20the%20Solutions%20blade%20in%20Azure%20Sentinel.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22NetSecNinjaTable.png%22%20style%3D%22width%3A%20931px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F280793i7050D6B0333E752D%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22NetSecNinjaTable.png%22%20alt%3D%22Azure%20Network%20Security%20Ninja%20Training%20Sections%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EAzure%20Network%20Security%20Ninja%20Training%20Sections%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1330044271%22%20id%3D%22toc-hId-1330045394%22%3E1%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20The%20Basics%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-2020605745%22%20id%3D%22toc-hId-2020606868%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E1.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Introduction%20to%20network%20security%20concepts%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20module%20introduces%20general%20concepts%20of%20network%20and%20web%20application%20security.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1583800077%22%20id%3D%22toc-hId--1583798954%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E1.1.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Network%20security%20in%20Azure%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EBe%20familiar%20with%20network%20security%20concepts%20and%20ways%20you%20can%20achieve%20a%20secure%20network%20deployment%20in%20the%20Azure%20cloud.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Fframework%2Fsecurity%2Fnetwork-security-containment%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ENetwork%20security%20and%20containment%20in%20Azure%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Freference-architectures%2Fhybrid-networking%2Fnetwork-level-segmentation%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESecure%20and%20govern%20workloads%20with%20network%20level%20segmentation%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Ffundamentals%2Fnetwork-best-practices%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EBest%20practices%20for%20network%20security%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-903712756%22%20id%3D%22toc-hId-903713879%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E1.1.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Web%20application%20protection%20in%20Azure%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EBe%20familiar%20with%20web%20application%20protection%20concepts%20and%20ways%20you%20can%20achieve%20a%20secure%20web%20application%20deployment%20in%20the%20Azure%20cloud.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Ffundamentals%2Fpaas-deployments%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EBest%20practices%20for%20secure%20PaaS%20deployments%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Fguide%2Farchitecture-styles%2Fn-tier%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EN-tier%20architecture%20style%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-893209652%22%20id%3D%22toc-hId-893210775%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E1.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Introduction%20to%20Azure%20network%20security%20products%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3D8Yf86ZSaKo8%26amp%3Bfeature%3Dyoutu.be%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EIntroduction%20to%20Azure%20Network%20Security%3C%2FA%3E%20(50%20minutes)%20webinar%2C%20which%20covers%20all%20products%20listed%20individually%20below.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmhAdYqiCRJOM1WqQR%3Fe%3D91l0Qg%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1583771126%22%20id%3D%22toc-hId-1583772249%22%3E%26nbsp%3B%3C%2FH3%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--223683337%22%20id%3D%22toc-hId--223682214%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E1.2.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20DDoS%20Protection%20Standard%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EAzure%20DDoS%20Protection%20Standard%2C%20combined%20with%20application%20design%20best%20practices%2C%20provides%20enhanced%20DDoS%20mitigation%20features%20to%20defend%20against%20DDoS%20attacks.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EFor%20more%20information%2C%20check%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20DDoS%20Protection%20Standard%20documentation%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EMS%20Learn%20Training%20Material%3A%26nbsp%3B%3C%2FSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fintroduction-azure-ddos-protection%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20DDoS%20Protection%20Standard%3C%2FA%3E%20(35%20minutes)%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThis%20MS%20Learn%20module%20will%20show%20you%20how%20to%20guard%20your%20Azure%20services%20from%20a%20denial-of-service%20attack%20using%20Azure%20DDoS%20Protection%20Standard.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--2031137800%22%20id%3D%22toc-hId--2031136677%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E1.2.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Firewall%20and%20Azure%20Firewall%20Manager%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EAzure%20Firewall%20is%20a%20managed%2C%20cloud-based%20network%20security%20service%20that%20protects%20your%20Azure%20Virtual%20Network%20resources.%20It's%20a%20fully%20stateful%20firewall%20as%20a%20service%20with%20built-in%20high%20availability%20and%20unrestricted%20cloud%20scalability.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EFor%20more%20information%2C%20check%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20documentation%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EAzure%20Firewall%20Manager%20is%20a%20security%20management%20service%20that%20provides%20central%20security%20policy%20and%20route%20management%20for%20cloud-based%20security%20perimeters.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EFor%20more%20information%2C%20check%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall-manager%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20Manager%20documentation%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EMS%20Learn%20Training%20Material%3A%26nbsp%3B%3C%2FSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fintroduction-azure-firewall%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20and%20Azure%20Firewall%20Manager%3C%2FA%3E%20(40%20minutes)%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThis%20MS%20Learn%20module%20will%20describe%20how%20Azure%20Firewall%20protects%20Azure%20Virtual%20Network%20resources%2C%20including%20the%20Azure%20Firewall%20features%2C%20rules%2C%20deployment%20options%2C%20and%20administration%20with%20Azure%20Firewall%20Manager.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-456375033%22%20id%3D%22toc-hId-456376156%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E1.2.3%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Web%20Application%20Firewall%20(WAF)%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EWeb%20Application%20Firewall%20(WAF)%20provides%20centralized%20protection%20of%20your%20web%20applications%20from%20common%20exploits%20and%20vulnerabilities.%20You%20can%20deploy%20WAF%20on%20Azure%20Application%20Gateway%20or%20WAF%20on%20Azure%20Front%20Door.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EFor%20more%20information%2C%20check%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Web%20Application%20Firewall%20(WAF)%20documentation%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EMS%20Learn%20Training%20Material%3A%26nbsp%3B%3C%2FSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fintroduction-azure-web-application-firewall%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Web%20Application%20Firewall%20(WAF)%3C%2FA%3E%20(40%20minutes)%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThis%20MS%20Learn%20module%20will%20show%20how%20Azure%20Web%20Application%20Firewall%20protects%20Azure%20web%20applications%20from%26nbsp%3Bcommon%26nbsp%3Battacks%2C%20including%20its%20features%2C%20how%20it%E2%80%99s%20deployed%2C%20and%20its%20common%20use%20cases.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--2052144008%22%20id%3D%22toc-hId--2052142885%22%3E2%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Architecture%20and%20Deployments%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-312187205%22%20id%3D%22toc-hId-312188328%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E2.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Standalone%20Deployments%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1366184539%22%20id%3D%22toc-hId--1366183416%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.1.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20DDoS%20Protection%20Standard%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EWhen%20deploying%20Azure%20DDoS%20Protection%20Standard%2C%20keep%20in%20mind%20that%20public%20IPs%20in%20ARM-based%20VNETs%20are%20currently%20the%20only%20type%20of%20protected%20resource.%20PaaS%20services%20(multitenant)%20are%20not%20supported%20for%20Azure%20DDoS%20Protection%20Standard%20SKU%20at%20this%20time.%20For%20these%20services%2C%20the%20default%20DDoS%20Protection%20Basic%20SKU%20applies.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThe%20main%20steps%20to%20deploy%20Azure%20DDoS%20Protection%20Standard%20are%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2Fmanage-ddos-protection%23create-a-ddos-protection-plan%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECreate%20a%20DDoS%20protection%20plan%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2Fmanage-ddos-protection%23enable-ddos-protection-for-a-virtual-network%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAttach%20vNETs%20to%20the%20DDoS%20protection%20plan%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2Fdiagnostic-logging%3Ftabs%3DDDoSProtectionNotifications%23configure-ddos-diagnostic-logs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20DDoS%20logging%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2Fdiagnostic-logging%3Ftabs%3DDDoSProtectionNotifications%23enable-diagnostic-logging-on-all-public-ips%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EEnable%20diagnostic%20settings%20on%20Public%20IP%20Address%20resources%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2FTTXZIerv1ig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EGetting%20started%20with%20Azure%20Distributed%20Denial%20of%20Service%26nbsp%3B(DDoS)%20Protection%3C%2FA%3E%20(60%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmhE-r3Wmt2atRRkgE%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck.%3C%2FA%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1121328294%22%20id%3D%22toc-hId-1121329417%22%3E%26nbsp%3B%3C%2FH3%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--686126169%22%20id%3D%22toc-hId--686125046%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.1.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Firewall%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EYou%20can%20choose%20to%20deploy%20Azure%20Firewall%20Standard%20SKU%20or%20Azure%20Firewall%20Premium%20SKU%20(currently%20in%20Public%20Preview).%20Check%20the%20documentation%20below%20to%20get%20an%20understanding%20of%20their%20feature%20differences%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ffeatures%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20Standard%20-%20Features%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fpremium-features%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20Premium%20-%20Features%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EDuring%20your%20planning%20stages%2C%20it%E2%80%99s%20also%20a%20good%20idea%20to%20refer%20to%20the%20known%20issues%20for%20these%20products.%20Being%20aware%20of%20these%20known%20issues%20will%20save%20you%20time%20and%20stress%20when%20deploying%20your%20Azure%20Firewall.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Foverview%23known-issues%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20Standard%20-%20Known%20Issues%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fpremium-features%23known-issues%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20Premium%20-%20Known%20Issues%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EDeploy%20and%20configure%20Azure%20Firewall%20using%20the%20Azure%20portal%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ftutorial-firewall-deploy-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDeploy%20and%20configure%20Azure%20Firewall%20using%20the%20Azure%20portal%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EAzure%20Firewall%20logs%20and%20metrics%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Flogs-and-metrics%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20logs%20and%20metrics%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ffirewall-diagnostics%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMonitor%20Azure%20Firewall%20logs%20and%20metrics%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Flogs-and-metrics%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EOverview%20of%20Azure%20Firewall%20logs%20and%20metrics%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EIntegrate%20Azure%20Firewall%20with%20Azure%20Standard%20Load%20Balancer%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fintegrate-lb%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EIntegrate%20Azure%20Firewall%20with%20Azure%20Standard%20Load%20Balancer%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EUse%20Azure%20Firewall%20to%20protect%20Azure%20Kubernetes%20Service%20(AKS)%20Deployments%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fprotect-azure-kubernetes-service%23securing-aks%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUse%20Azure%20Firewall%20to%20protect%20Azure%20Kubernetes%20Service%20(AKS)%20Deployments%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Faks%2Flimit-egress-traffic%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ERestrict%20egress%20traffic%20in%20Azure%20Kubernetes%20Service%20(AKS)%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EAzure%20Firewall%20DNS%20settings%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fdns-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20DNS%20settings%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ffqdn-filtering-network-rules%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EEnabling%20DNS%20proxy%20in%20your%20Azure%20Firewall%20will%20allow%20you%20to%20use%20FQDN%20filtering%20in%20network%20rules%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fenabling-central-visibility-for-dns-using-azure-firewall-custom%2Fba-p%2F2156331%22%20target%3D%22_blank%22%3EEnabling%20Central%20Visibility%20For%20DNS%20Using%20Azure%20Firewall%20Custom%20DNS%20and%20DNS%20Proxy%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CSTRONG%3EAzure%20Firewall%20in%20forced%20tunneling%20mode%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fforced-tunneling%23forced-tunneling-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Firewall%20in%20forced%20tunneling%20mode%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2Fujq37bVWki0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EManage%20application%20and%20network%20connectivity%20with%20Azure%20Firewall%3C%2FA%3E%20(50%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmhVbm5MYLz0MPW9kc%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck.%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20data-unlink%3D%22true%22%3EYou%20can%20also%20check%20out%20this%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DJiUerkqyW0g%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EAzure%20Firewall%20Deep%20Dive%3C%2FA%3E%26nbsp%3Bon%20Youtube%20(82%20minutes).%20It%20covers%20almost%20everything%20you%20need%20to%20know!%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1801386664%22%20id%3D%22toc-hId-1801387787%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.1.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Web%20Application%20Firewall%20(WAF)%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fapplication-gateway-web-application-firewall-portal%23create-and-link-a-web-application-firewall-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECreate%20a%20WAF%20Policy%20on%20Azure%20Application%20Gateway%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fafds%2Fwaf-front-door-create-portal%23create-a-web-application-firewall-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECreate%20a%20WAF%20Policy%20on%20Azure%20Front%20Door%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fweb-application-firewall-logs%23enable-logging-through-the-azure-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20WAF%20logging%20for%20an%20Application%20Gateway%20deployment%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fafds%2Fwaf-front-door-monitor%23logs-and-diagnostics%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20WAF%20logging%20for%20a%20Front%20Door%20deployment%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fazure-web-application-firewall-waf-config-versus-waf-policy%2Fba-p%2F2270525%22%20target%3D%22_blank%22%3EAzure%20Web%20Application%20Firewall%3A%20WAF%20config%20versus%20WAF%20policy%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--135150518%22%20id%3D%22toc-hId--135149395%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E2.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Advanced%20Deployments%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1813522262%22%20id%3D%22toc-hId--1813521139%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20On-Prem%20Hybrid%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3EDeploy%20and%20configure%20Azure%20Firewall%20in%20a%20hybrid%20network%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ftutorial-hybrid-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Evia%20Azure%20Portal%3C%2FA%3E%20or%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Ftutorial-hybrid-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Evia%20PowerShell%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Freference-architectures%2Fdmz%2Fnva-ha%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDeploy%20network%20virtual%20appliances%20(NVAs)%20for%20high%20availability%20in%20Azure%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Freference-architectures%2Fdmz%2Fsecure-vnet-dmz%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EImplement%20a%20secure%20hybrid%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-673990571%22%20id%3D%22toc-hId-673991694%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20vWAN%20(Secured%20Virtual%20Hub)%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fintroduction-azure-virtual-wan%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EIntroduction%20to%20Azure%20Virtual%20WAN%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall-manager%2Fvhubs-and-vnets%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWhat%20are%20the%20Azure%20Firewall%20Manager%20architecture%20options%3F%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fvirtual-wan-about%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Virtual%20WAN%20FAQs%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fvirtual-wan-about%23how-does-the-virtual-hub-in-a-virtual-wan-select-the-best-path-for-a-route-from-multiple-hubs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHow%20does%20the%20virtual%20hub%20in%20a%20virtual%20WAN%20select%20the%20best%20path%20for%20a%20route%20from%20multiple%20hubs%3F%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fhowto-firewall%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20Azure%20Firewall%20in%20a%20VWAN%20hub%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fhowto-firewall%23convert-to-secured-hub%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConvert%20a%20VWAN%20to%20a%20Secure%20Hub%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall-manager%2Fsecure-cloud-network%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESecure%20your%20VirtualHub%20with%20Azure%20Firewall%20Manager%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fmigrate-from-hub-spoke-topology%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMigrate%20to%20Virtual%20WAN%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1133463892%22%20id%3D%22toc-hId--1133462769%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.3%26nbsp%3B%26nbsp%3B%26nbsp%3B%20vWAN%20(Secured%20Virtual%20Hub)%20with%203%3CSUP%3Erd%3C%2FSUP%3E%20party%20SECCaaS%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-wan%2Fvirtual-wan-locations-partners%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EVWAN%20hub%20partners%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall-manager%2Fdeploy-trusted-security-partner%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDeploy%20a%20security%20partner%20provider%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2FC8AuN76DEmU%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EDeploy%20Check%20Point%20CloudGuard%20Connect%20as%20a%20trusted%20Azure%20security%20partner%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1354048941%22%20id%3D%22toc-hId-1354050064%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.4%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Hub%20and%20Spoke%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fcloud-adoption-framework%2Fready%2Fazure-best-practices%2Fhub-spoke-network-topology%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHub%20and%20spoke%20network%20topology%20%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Freference-architectures%2Fhybrid-networking%2Fhub-spoke%3Ftabs%3Dcli%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHub-spoke%20network%20topology%20in%20with%20Azure%20Firewall%20%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Ffasttrack-for-azure%2Fusing-azure-firewall-as-a-network-virtual-appliance-nva%2Fba-p%2F1972934%22%20target%3D%22_blank%22%3EUsing%20Azure%20Firewall%20as%20a%20Network%20Virtual%20Appliance%20(NVA)%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-244756419%22%20id%3D%22toc-hId-244757542%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.5%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Forced%20Tunneling%20with%203%3CSUP%3Erd%3C%2FSUP%3E%20party%20NVAs%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fforced-tunneling%23forced-tunneling-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EForced%20tunneling%20configuration.%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvpn-gateway%2Fvpn-gateway-about-vpn-devices%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EValidated%20VPN%20devices%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1562698044%22%20id%3D%22toc-hId--1562696921%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.6%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Multi-product%20combination%20in%20Azure%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Fexample-scenario%2Fgateway%2Ffirewall-application-gateway%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECombine%20Azure%20Firewall%20with%20other%20Network%20security%20products.%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Farchitecture%2Fguide%2Ftechnology-choices%2Fload-balancing-overview%23decision-tree-for-load-balancing-in-azure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDetermine%20how%20best%20to%20combine%20App%20Gateway%20and%20Azure%20Frontdoor%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-924814789%22%20id%3D%22toc-hId-924815912%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.7%26nbsp%3B%26nbsp%3B%26nbsp%3B%20TLS%20Inspection%20on%20Azure%20Firewall%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fpremium-features%23tls-inspection%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EEnable%20TLS%20inspection%20in%20Azure%20firewall%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall%2Fpremium-features%23url-filtering%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ELearn%20about%20URL%20filtering%20and%20Web%20Categories%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fcertificate-management-overview-for-azure-firewall-premium-tls%2Fba-p%2F2214763%22%20target%3D%22_blank%22%3ECertificate%20Management%20Overview%20for%20Azure%20Firewall%20Premium%20TLS%20Inspection%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2FA-hWyZZsFVY%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EContent%20Inspection%20Using%20TLS%20Termination%20with%20Azure%20Firewall%20Premium%3C%2FA%3E%20(50%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmh12VTRNnugnguKjT%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck.%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--882639674%22%20id%3D%22toc-hId--882638551%22%3E%26nbsp%3B%3C%2FH3%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1604873159%22%20id%3D%22toc-hId-1604874282%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E2.2.8%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Per-Site%20or%20Per-URI%20WAF%20policies%20on%20Azure%20Application%20Gateway%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fper-site-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20Per-Site%20WAF%20policies%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fper-site-policies%23apply-a-per-uri-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EApply%20Per-URI%20policy%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3Ddb7_6BMOQpk%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EUsing%20Azure%20WAF%20Policies%20to%20Protect%20Your%20Web%20Application%20at%20Different%20Association%20Levels%3C%2FA%3E%20(50%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmiCJmnosZ57t1rsyC%3Fe%3DLkh9B8%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck.%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH1%20id%3D%22toc-hId--460746742%22%20id%3D%22toc-hId--460745619%22%3E%26nbsp%3B%3C%2FH1%3E%0A%3CH1%20id%3D%22toc-hId-2026766091%22%20id%3D%22toc-hId-2026767214%22%3E3%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Operations%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-348394347%22%20id%3D%22toc-hId-348395470%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E3.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Centralized%20Management%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--1329977397%22%20id%3D%22toc-hId--1329976274%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.1.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Firewall%20Manager%20and%20Firewall%20Policy%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Ffirewall-manager%2Frule-hierarchy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUse%20Azure%20Firewall%20policy%20to%20define%20a%20rule%20hierarchy%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2F0_YzYky9_wI%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EGetting%20started%20with%20Azure%20Firewall%20Manager%3C%2FA%3E%20(35%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmhVqXfXIjbAazVtdz%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20Azure%20Firewall%20Manager%20presentation%20deck%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-1157535436%22%20id%3D%22toc-hId-1157536559%22%3E%26nbsp%3B%3C%2FH3%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-48242914%22%20id%3D%22toc-hId-48244037%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.1.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Web%20Application%20Firewall%20(WAF)%20Policy%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fmigrate-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMigrate%20from%20WAF%20Config%20to%20WAF%20Policy%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1888294268%22%20id%3D%22toc-hId--1888293145%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E3.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Optimizing%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-728301284%22%20id%3D%22toc-hId-728302407%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.2.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Web%20Application%20Firewall%20(WAF)%20tuning%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fag%2Fweb-application-firewall-troubleshoot%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ETroubleshooting%20and%20tuning%20for%20Azure%20WAF%20for%20Application%20Gateway%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fafds%2Fwaf-front-door-tuning%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ETroubleshooting%20and%20tuning%20for%20Azure%20WAF%20for%20Front%20Door%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3EDo%20you%20prefer%20videos%3F%20Check%20out%20the%20%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2F4r1Hen__6Co%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EBoosting%20your%20Azure%20Web%20Application%20(WAF)%20deployment%3C%2FA%3E%20(45%20minutes)%20webinar.%20You%20can%20also%20quickly%20browse%20through%20the%20%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fb%2Fs!AnEPjr8tHcNmhFn_N65vNDyHG1S4%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Econtents%20of%20the%20presentation%20deck.%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CH2%20id%3D%22toc-hId--1208235898%22%20id%3D%22toc-hId--1208234775%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%22toc-hId-1279276935%22%20id%3D%22toc-hId-1279278058%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E3.3%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Governance%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--399094809%22%20id%3D%22toc-hId--399093686%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.3.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Built-in%20Azure%20Policies%20for%20Azure%20DDoS%20Protection%20Standard%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252Fa7aca53f-2ed4-4466-a25e-0b45ade68efd%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAzure%20DDoS%20Protection%20Standard%20should%20be%20enabled%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F752154a7-1e0f-45c6-a880-ac75a7e4f648%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EPublic%20IP%20addresses%20should%20have%20resource%20logs%20enabled%20for%20Azure%20DDoS%20Protection%20Standard%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EVirtual%20networks%20should%20be%20protected%20by%20Azure%20DDoS%20Protection%20Standard%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-2088418024%22%20id%3D%22toc-hId-2088419147%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.3.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Built-in%20Azure%20Policies%20for%20Azure%20Web%20Application%20Firewall%20(WAF)%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F564feb30-bf6a-4854-b4bb-0d2d2d1e6c66%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EWeb%20Application%20Firewall%20(WAF)%20should%20be%20enabled%20for%20Application%20Gateway%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F055aa869-bc98-4af8-bafc-23f1ab6ffe2c%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EWeb%20Application%20Firewall%20(WAF)%20should%20be%20enabled%20for%20Azure%20Front%20Door%20Service%20service%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F12430be1-6cc8-4527-a9a8-e3d38f250096%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EWeb%20Application%20Firewall%20(WAF)%20should%20use%20the%20specified%20mode%20for%20Application%20Gateway%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20style%3D%22padding-left%3A%2030px%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_Policy%2FPolicyDetailBlade%2FdefinitionId%2F%252Fproviders%252FMicrosoft.Authorization%252FpolicyDefinitions%252F425bea59-a659-4cbb-8d31-34499bd030b8%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EWeb%20Application%20Firewall%20(WAF)%20should%20use%20the%20specified%20mode%20for%20Azure%20Front%20Door%20Service%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-280963561%22%20id%3D%22toc-hId-280964684%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.3.3%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Restrict%20creation%20of%20Azure%20DDoS%20Protection%20Standard%20plans%20with%20Azure%20Policy%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EIf%20you%20are%20looking%20to%20prevent%20unplanned%20or%20unapproved%20costs%20associated%20with%20the%20creation%20of%20multiple%20DDoS%20plans%20within%20the%20same%20tenant%2C%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Network-Security%2Ftree%2Fmaster%2FAzure%2520DDoS%2520Protection%2FPolicy%2520-%2520DDOS%2520Restrict%2520creation%2520of%2520Azure%2520DDoS%2520Protection%2520Standard%2520Plans%2520with%2520Azure%2520Policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Echeck%20out%20this%20Azure%20Policy%20template%3C%2FA%3E.%20This%20policy%20denies%20the%20creation%20of%20Azure%20DDoS%20Protection%20Standard%20plans%20on%20any%20subscriptions%2C%20except%20for%20the%20ones%20defined%20as%20allowed.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1655573621%22%20id%3D%22toc-hId--1655572498%22%3E%3CSPAN%20style%3D%22color%3A%20%23000080%3B%22%3E3.4%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Responding%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId-961021931%22%20id%3D%22toc-hId-961023054%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.4.1%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20Web%20Application%20Firewall%20(WAF)%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThis%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Network-Security%2Ftree%2Fmaster%2FAzure%2520WAF%2FPlaybook%2520-%2520WAF%2520Sentinel%2520Playbook%2520Block%2520IP%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ELogic%20App%20Playbook%3C%2FA%3E%20for%20Sentinel%20will%20add%20the%20source%20IP%20address%20passed%20from%20the%20Sentinel%20Incident%20to%20a%20custom%20WAF%20rule%20blocking%20the%20IP.%20For%20a%20more%20comprehensive%20description%20of%20this%20use%20case%2C%20check%20our%20blog%20post%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fintegrating-azure-web-application-firewall-with-azure-sentinel%2Fba-p%2F1720306%22%20target%3D%22_blank%22%3EIntegrating%20Azure%20Web%20Application%20Firewall%20with%20Azure%20Sentinel%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20style%3D%22padding-left%3A%2030px%3B%22%20id%3D%22toc-hId--148270591%22%20id%3D%22toc-hId--148269468%22%3E%3CSPAN%20style%3D%22color%3A%20%233366ff%3B%22%3E3.4.2%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Azure%20DDoS%20Protection%20Standard%3C%2FSPAN%3E%3C%2FH3%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EDuring%20an%20active%20access%2C%20Azure%20DDoS%20Protection%20Standard%20customers%20have%20access%20to%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fddos-protection%2Fddos-rapid-response%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDDoS%20Rapid%20Response%20(DRR)%3C%2FA%3E%20team%2C%20who%20can%20help%20with%20attack%20investigation%20during%20an%20attack%20and%20post-attack%20analysis.%3C%2FP%3E%0A%3CP%20style%3D%22padding-left%3A%2030px%3B%22%3EThis%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Network-Security%2Ftree%2Fmaster%2FAzure%2520DDoS%2520Protection%2FAutomation%2520-%2520DDoS%2520Mitigation%2520Alert%2520Enrichment%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDDoS%20Mitigation%20Alert%20Enrichment%3C%2FA%3E%20template%20will%20alert%20administrators%20of%20a%20DDoS%20event%2C%20while%20adding%20essential%20information%20in%20the%20body%20of%20the%20email%20for%20a%20more%20detailed%20notification.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-2081076804%22%20id%3D%22toc-hId-2081077927%22%3E4%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Integrations%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUsing%20Azure%20Sentinel%20with%20Azure%20Web%20Application%20Firewall%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EYou%20can%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fweb-application-firewall%2Fwaf-sentinel%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eintegrate%20Azure%20WAF%20with%20Azure%20Sentinel%3C%2FA%3E%20for%20security%20information%20event%20management%20(SIEM).%20By%20doing%20this%2C%20you%20can%20use%20Azure%20Sentinel%E2%80%99s%20security%20analytics%2C%20playbooks%20and%20workbooks%20with%20your%20WAF%E2%80%99s%20log%20data.%3C%2FP%3E%0A%3CP%3EIn%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fintegrating-azure-web-application-firewall-with-azure-sentinel%2Fba-p%2F1720306%22%20target%3D%22_blank%22%3Ethis%20blog%20post%3C%2FA%3E%2C%20we%20cover%20in%20further%20detail%20how%20to%20configure%20the%20log%20connector%2C%20query%20logs%2C%20generate%20incidents%2C%20and%20automate%20responses%20to%20incidents.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUsing%20Azure%20Sentinel%20Solutions%20for%20Azure%20Firewall%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20Azure%20Firewall%20Solution%20provides%20new%20threat%20detections%2C%20hunting%20queries%2C%20a%20new%20firewall%20workbook%20and%20response%20automation%20as%20packaged%20content.%20This%20enables%20you%20to%20find%20the%20appropriate%20solution%20easily%20and%20then%20deploy%20all%20the%20components%20in%20the%20solution%20in%20a%20single%20step%20from%20the%20Solutions%20blade%20in%20Azure%20Sentinel.%3C%2FP%3E%0A%3CP%3EIn%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fnew-detections-hunting-queries-and-response-automation-in-azure%2Fba-p%2F2688746%22%20target%3D%22_blank%22%3Ethis%20blog%20post%3C%2FA%3E%2C%20we%20cover%20in%20further%20detail%20how%20automate%20detections%20and%20response%20for%20Azure%20Firewall%20events%20using%20Azure%20Sentinel.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-273622341%22%20id%3D%22toc-hId-273623464%22%3E5%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Hands-on%20Labs%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENetwork%20Security%20Demo%20lab%3A%20Azure%20pre-configured%20test%20deployment%20kit%20for%20POC%20is%20available%20in%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Network-Security%2Ftree%2Fmaster%2FCross%2520Product%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%20repository%3C%2FA%3E.%20%26nbsp%3BYou%20can%20use%20this%20lab%20to%20validate%20Proof%20of%20Concepts%20for%20the%20different%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fazure-network-security-proof-of-concept-part-2-deploying-the%2Fba-p%2F1773168%22%20target%3D%22_blank%22%3ENetwork%3C%2FA%3E%20security%20products.%20You%20can%20find%20more%20information%20on%20set%20up%20and%20demo%20in%20the%20NetSec%20POC%20blogpost%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWAF%20Attack%20test%20lab%3C%2FSTRONG%3E%3A%20Set%20up%20a%20Web%20Application%20Firewall%20lab%20environment%20to%20verify%20how%20you%20can%20identify%2C%20detect%20and%20protect%20against%20suspicious%20activities%20in%20your%20environment.%20This%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fpart-1-lab-setup-azure-waf-security-protection-and-detection-lab%2Fba-p%2F2030469%22%20target%3D%22_blank%22%3Eblogpost%3C%2FA%3E%20provides%20steps%20to%20protect%20against%20potential%20attacks%20and%20you%20can%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Network-Security%2Ftree%2Fmaster%2FLab%2520Templates%2FLab%2520Template%2520-%2520WAF%2520Attack%2520Testing%2520Lab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Edeploy%20the%20template%20from%20Github%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EInteractive%20Guide%3A%3C%2FSTRONG%3E%20If%20you%20cannot%20set%20up%20a%20lab%20environment%2C%20you%20can%20still%20get%20a%20hands-on%20experience%20with%20our%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmslearn.cloudguides.com%2Fen-us%2Fguides%2FProtect%2520your%2520cloud%2520infrastructure%2520with%2520Azure%2520network%2520security%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EAzure%20network%20security%20interactive%20guide%3C%2FA%3E.%20In%20this%20guide%2C%20we%20will%20show%20you%20how%20you%20can%20protect%20your%20cloud%20infrastructure%20with%20Azure%20network%20security%20tools.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--1533832122%22%20id%3D%22toc-hId--1533830999%22%3E6%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Resource%20References%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegister%20for%20upcoming%20webinars%20or%20watch%20recordings%20of%20past%20webinars%20in%20our%20Microsoft%20Security%20Community!%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FSecurityWebinars%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FSecurityWebinars%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3ECheck%20out%20and%20be%20sure%20to%20contribute%20with%20our%20Azure%20Network%20Security%20samples%20in%20GitHub!%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Faznetsec%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Faznetsec%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3ECheck%20out%20our%20Azure%20Network%20Security%20blog%20posts%20in%20our%20Tech%20Community!%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Faznetsecblog%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Faznetsecblog%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EProvide%20feedback%20and%20ideas%20about%20Azure%20products%20and%20features%20in%20our%20Azure%20Feedback%20portal!%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fazurefeedback%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Faka.ms%2Fazurefeedback%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2356101%22%20slang%3D%22en-US%22%3E%3CP%3EBecome%20an%20Azure%20network%20security%20ninja!%26nbsp%3BWe%20have%20gathered%20essential%20materials%2C%20from%20foundational%20to%20advanced%20concepts%2C%20to%20help%20you%20master%20network%20security%20in%20Azure.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2356101%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20DDoS%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Firewall%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Firewall%20Manager%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Network%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20WAF%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Oct 06 2021 10:30 AM
Updated by:
www.000webhost.com