Security

Azure – Use Azure Information Protection Scanner to automatically apply label and protect on-premises files

You may already Azure Information Protection (AIP) is used to protect and classify your data. You may aware you can also automated classification and protection for your data hosted online. Now, you can use Azure Information Protection Scanner to automatically classify and protect your files hosted on-premises, either on file servers or SharePoint (2013 or […]

Azure – Use Azure Information Protection Scanner to automatically apply label and protect on-premises files Read More »

Azure AD – Pass-Through authentication account lockout

When you use Azure AD Pass-Through authentication, your users are getting authenticated against your on-premises Active Directory when accessing cloud services (same way if you were using Federation, except this requires less infrastructure). So, knowing that (you are authenticating against your on-premises AD), what happen if an attacker is trying to gain access to your

Azure AD – Pass-Through authentication account lockout Read More »

Office 365 – It is time to move from TLS 1.0 and 1.1

In order to improve the security, Office 365 services are going to stop supporting Transport Layer Security (TLS) 1.0 and 1.1 If you are in hybrid scenarios (either with Exchange or Skype for Business) and/or if you use AD FS for your authentication services, you need to ensure your on-premises services supports TLS 1.2 Starting

Office 365 – It is time to move from TLS 1.0 and 1.1 Read More »

Office 365 – ATP is available for SharePoint and Teams too

Office 365 ATP (Advanced Threats Protection) is an advanced protection solution provided by Office 365, already available for Exchange Online and for few months on Office Click To Run (see to learn more about ATP https://support.office.com/en-us/article/Office-365-Advanced-Threat-Protection-e100fe7c-f2a1-4b7d-9e08-622330b83653?ui=en-US&rs=en-US&ad=US) The solution is used to deeply analyzed URL’s and attachments before letting end-users accessing it. Now, Office 365 ATP

Office 365 – ATP is available for SharePoint and Teams too Read More »

Office 365 – You can now use MFA to connect with PowerShell to Security and Compliance Center

If you use PowerShell to connect to Office 365 services, and also have MFA enabled, you already know there is always some issue to connect with PowerShell to some of the Office 365 services. While Microsoft is improving the situation, you can now have MFA enabled and connect to the Security and Compliance Center with

Office 365 – You can now use MFA to connect with PowerShell to Security and Compliance Center Read More »

Azure – SQL Vulnerability Assessment

Microsoft has introduced a new feature to help you ensuring your Azure SQL services are secured. This feature is called SQL Vulnerability Assessment and is available on preview; the good news is you can also use it with your on-premises SQL servers. It has been designed in a way that even non security/SQL expert can

Azure – SQL Vulnerability Assessment Read More »

Azure – Azure VNet DDoS protection

As announced at the Ignite Conference, a new Distributed Denial of Service protection has been added to Azure virtual network. This comes into 2 different offers: Basic and free Standard, providing custom and tuned protection based on your Azure Resource   To start using it you can register for the standard preview at http://aka.ms/ddosprotection (no

Azure – Azure VNet DDoS protection Read More »

ADFS – Resolve authentication issue faster

Authentication is a key to access corporate resources, hosted either on-premises (you can use ADFS to authenticate against Exchange to access your mailbox) or in the cloud (Office 365, Azure, Salesforce…). While Microsoft is working hard to make authentication process to his services a little bit easier for end-users (password synch, seamless single sign-on…), you

ADFS – Resolve authentication issue faster Read More »

Azure – Azure DDoS Protection Service

A new security feature has been added to Azure called Azure DDoS Protection Service. This new service is integrated with Virtual Networks to protect you against DDoS attacks. It comes into 2 service levels: Azure DDoS Protection Basic Service with no additional cost associated and does not requires any configuration or application changes Azure DDoS

Azure – Azure DDoS Protection Service Read More »

Azure – New version of the Azure Information Protection Client

A new version (1.10.56.0) of the Azure Information Protection Client has been released and is available for download at https://www.microsoft.com/en-us/download/details.aspx?id=53018. As part of this new release, you can now: enable recommended classification also for Outlook hide the Do Not Forward button in Outlook hide the custom permission options to end-user integrates with Office 365 DLP

Azure – New version of the Azure Information Protection Client Read More »