Microsoft Azure Network Security

About

Features

• Expert, start-to-finish guidance for every Azure cloud environment, regardless of size or complexity
• An in-depth, cloud-native, cohesive approach based on Microsoft's proven best practices
• Combines a thoughtful overview of cloud network security with detailed drill-downs on cloud-native firewalls, DDOS, WAF, third-party solutions, and more

Description

Master a complete strategy for protecting any Azure cloud network environment!

Network security is crucial to safely deploying and managing Azure cloud resources in any environment. Now, two of Microsoft's leading experts present a comprehensive, cloud-native approach to protecting your network, and safeguarding all your Azure systems and assets. Nicholas DiCola and Anthony Roman begin with a thoughtful overview of network security's role in the cloud. Next, they offer practical, real-world guidance on deploying cloud-native solutions for firewalling, DDOS, WAF, and other foundational services all within a best-practice secure network architecture based on proven design patterns.

Two of Microsoft's leading Azure network security experts show how to:

• Review Azure components and services for securing network infrastructure, and the threats to consider in using them
• Layer cloud security into a Zero Trust approach that helps limit or contain attacks
• Centrally direct and inspect traffic with the managed, stateful, Platform-as-a-Service Azure Firewall
• Improve visibility into Azure traffic with Deep Packet Inspection
• Optimize the way network and web application security work together
• Use Azure DDoS Protection (Basic and Standard) to mitigate Layer 3 (volumetric) and Layer 4 (protocol) DDoS attacks
• Enable log collection for Firewall, DDoS, WAF, and Bastion; and configure NSG Flow Logs and Traffic Analytics
• Continually monitor network security with Azure Sentinel, Security Center, and Network Watcher
• Customize queries, playbooks, workbooks, and alerts when Azure's robust out-of-the-box alerts and tools aren't enough
• Build and maintain secure architecture designs that scale smoothly to handle growing complexity

About This Book

• For Security Operations (SecOps) analysts, cybersecurity/information security professionals, network security engineers, and other IT professionals
• For individuals with security responsibilities in any Azure environment, no matter how large, small, simple, or complex

Sample Content

Sample Pages

Download the sample pages (includes Chapter 2)

Table of Contents

1. Introduction to Cloud Network Security
2. Secure Azure Network Architecture
3. Controlling Traffic with Azure Firewall
4. Traffic Inspection in Azure Networks
5. Application Security using Azure Web Application Firewall
6. Preventing Volumetric DDoS Attacks
7. Enabling Network Security Data Collection
8. Network Security Monitoring with Azure Sentinel, Azure Security Center, and Network Watcher
9. Combining Azure Resources for a Wholistic Network Security Strategy

Updates

Submit Errata