Security

Azure – You can now use Bastion with peered virtual network (preview)

As you may know, Microsoft has released a solution allowing you to remotely connect with RDP or SSH to your virtual machines running on Azure without being obliged to have a public IP (and corresponding ports opened) called Azure Bastion (see https://t.co/UBOCpnMD2k) Well, until know, if you had multiple Vnets, you had to deploy Bastion […]

Azure – You can now use Bastion with peered virtual network (preview) Read More »

Azure AD – Get Password spray attack detection report when using Identity Protection

As you know, password attacks have been there for quite some time. Well, if you are using Azure AD Identity Protection to help you secure your accounts, you now have the ability to have report on the specific password spray attack from the Risk Detection. You need to use Azure AD P2 to be able

Azure AD – Get Password spray attack detection report when using Identity Protection Read More »

Azure – You can now use FQDN name to define your Local Network Gateway

As you know, you can setup a Site-to-Site VPN between your on-premises infrastructure and Azure. This VPN connectivity involves the creation of a Local Network Gateway (LNG). Until now, you add to configure a public IP for your LNG. Well, good news you can now use a Fully Qualified Domain Name (FQDN) instead of the

Azure – You can now use FQDN name to define your Local Network Gateway Read More »

Azure – You can now use RBAC to manage access to Key Vault (preview)

As you know, Key Vault lets you save secrets, certificates or keys in a secure way to then allows you to use it either with automation or simply as a ‘user vault’. You also know that access to the Key Vault is managed by assigning access policies, defining who can access and do what. Well,

Azure – You can now use RBAC to manage access to Key Vault (preview) Read More »

Exchange Online – You can now use a configuration analyzer to review your EOP configuration

As you know, Exchange Online Protection (EOP) plays an important role in your mail hygiene posture by blocking unsolicited or phishing emails and malware. You may (or should) already have set policies for EOP. Well, you can now use a Configuration Analyzer to have a review of your configuration and adjust based on Microsoft recommendations.

Exchange Online – You can now use a configuration analyzer to review your EOP configuration Read More »

Azure – You can now customize the endpoint protection recommendation in ASC

As you know, Azure Security Center (ASC) is your one stop shop helping you maintain and improve your secure posture in Azure (including your on-premises workloads too if onboarded). As you also know, ASC provides a recommendation (and report) for ensuring your virtual machines have an endpoint protection solution installed and healthy. This recommendation is

Azure – You can now customize the endpoint protection recommendation in ASC Read More »

Office 365 – You can now launch simulated attacks targeting your end-users

As working remotely is more predominant, ensuring your end-users are working securely is more important than ever. Few months ago, Microsoft has partnered with Terranova Security to provide end-users training kits for Office 365 customers (see https://t.co/whbjd68YIF). Well, this partnership is now delivering attack simulation scenarios to help maintain/improve your end-uses awareness. This is similar

Office 365 – You can now launch simulated attacks targeting your end-users Read More »

Azure – You can now create exception for Azure Security Center recommendations

As you know, Azure Security Center (ASC) is your one stop shop to get an overview of your Azure security posture and custom recommendations based on your Azure environment. Well, while this quite an important capability, there are some limitations, such as not being able to be selective on which resource(s) a recommendation should apply.

Azure – You can now create exception for Azure Security Center recommendations Read More »

Azure AD B2C – New access risk insights and Conditional Access are now available in preview

As you know Microsoft Cloud services identity is based on Azure Active Directory (AAD). You may also know that Azure AD is not only available for corporate authentication for your users or external partners companies but you can leverage Azure AD for you business to consumer (B2C) application with Azure AD B2C. Well, Azure AD

Azure AD B2C – New access risk insights and Conditional Access are now available in preview Read More »

Azure – Automatically block IP’s in Network Security Group when brute force attack is detected

As you know Azure Security Center is your one stop shop to help you stay on top of your security posture for your resources hosted in Azure. As there is more and more resources hosted on cloud services, security and protection against attack is more important than ever. As you know you can protect your

Azure – Automatically block IP’s in Network Security Group when brute force attack is detected Read More »