Blog

Azure DMZ Architecture: Public and Private Subnets, NSGs & Firewall Rules Azure DMZ Architecture Overview In Azure, a DMZ (Demilitarized Zone) can be implemented using both a public subnet and…

Azure ExpressRoute Troubleshooting and Alerts Setting up an ExpressRoute connection is just the beginning. To ensure high availability, performance, and fast incident response, configuring comprehensive monitoring and alerting is critical.…

Azure Monitor Baseline Alerts for AVDs - great for capturing common baseline events for AVD instances

Azure LEvel Enable Azure Insights to capture RTT for the AVD Spin Up as well as RTT for the networking VM LEvel At the NIC level, Enable VM Accelerated Networking…

For Intune (device) migrations to be successful, two things need to be in place The identities (for those devices) need to be in place already The licensing for the devices…

Step 1 - Creating a NEW  STORAGE ACCOUNT Types - Storage accounts are of three types - V2 (most general purpose), V1 (hardly used anymore) and Blob Storage (can only…

These are the top recommended policies for most customers. Enforce resource tagging Limit allowed locations Prohibit specific resources deployment (e.g. Public IP addresses) Require Secure Transfer for Storage Accounts Block…

Now, there's a policy that allows you to restrict which devices get into your Azure subscriptions. The compliant devices policy requires you to list CIDR ranges/devices that are permitted. You…

Use Case Let in a set of Vendor Engineers into your Azure Subscription (typically with GLOBAL READER permissions) Steps in Entra and in Azure Set up SSO using the vendor's…

Use Case - SSO Authentication and MFA - no mailbox P2 licenses - Cloud Only Authentication (not federated)