Author Archives: anuj
Device Restrictions using Conditional Access Policies in Azure Entra ID
Now, there's a policy that allows you to restrict which devices get into your Azure subscriptions. The compliant devices policy requires you to list CIDR ranges/devices that are permitted. You…
Letting in vendors to your Entra Tenant
Use Case Let in a set of Vendor Engineers into your Azure Subscription (typically with GLOBAL READER permissions) Steps in Entra and in Azure Set up SSO using the vendor's…
P2 licenses – Use Case – SSO Authentication and MFA – no mailbox
Use Case - SSO Authentication and MFA - no mailbox P2 licenses - Cloud Only Authentication (not federated)
Devices versus Apps – Managed by Intune
Intune Can be used to manage both devices as well as applications on the devices. One can configure InTune for JUST application management (and have some other tool do the…
Migration of Azure site-to-site VPN tunnel from one region to another
Option 1 - create a new VPN in the new region Create a new VPN gateway in the desired region Configure the new gateway with the same connection settings as…
Azure Hub Spoke Best Practices
The HUB VNET contains the Firewall Subnet, the Gateway VPN Subnet (which has a SITE TO SITE VPN) and the workload Subnet A. The Spoke VNET contains other workloads in…
Container Networking Security on Azure
For Containers to be assigned IP Addresses (in order to access Azure PaaS services - the storage service), one can use the Container network interface plugin
Access Reviews in Azure AD
When you create access reviews for admin level users ( global admin or password admin), you have a couple of options on how to deal with the review results. You…
External Users and Active Directory
Also read - 4 types of authentication What exactly are External USers from an AD perspective? External Users can be both your own corporate (remote) users, OR external partners. This…
Azure Firewall – Stateful, Packet Inspection
What is needed to deploy an Azure Firewall? Azure Firewall requires it's own empty subnet and an unused IP address space. You will need to create an address space, if…