{"id":1916,"date":"2023-03-30T09:00:49","date_gmt":"2023-03-30T08:00:49","guid":{"rendered":"https:\/\/www.ituziast.com\/?p=1916"},"modified":"2023-05-10T13:14:03","modified_gmt":"2023-05-10T12:14:03","slug":"azure-announcements-march-2023","status":"publish","type":"post","link":"https:\/\/www.ituziast.com\/index.php\/2023\/03\/30\/azure-announcements-march-2023\/","title":{"rendered":"Azure Announcements (March 2023)"},"content":{"rendered":"\n

Microsoft Azure<\/a>, being a constantly evolving, updating and changing environment. Sometimes this makes it difficult to follow all that happens around it. I will try to condense some of the announcements based on status – generally available, preview or update features.<\/p>\n\n\n\n

Be aware that generally available features\/updates might incur costs. Services part of a public preview<\/a>, don’t incur any costs, but also does not have Service-Level Agreement (SLA<\/a>).<\/p>\n\n\n\n

\n

Previous articles:<\/p>\nCloud Section (Ituziast)<\/a><\/cite><\/blockquote>\n\n\n\n

Blogs<\/h2>\n\n\n\n

Monitor Azure Virtual Network Manager changes with event logging<\/h3>\n\n\n\n

As the number of network resources increases, the need to maintain connectivity and security also grows. To address this challenge, Azure Virtual Network Manager<\/a> (AVNM) provides a comprehensive solution for managing network resources at scale, currently available in preview. Additionally, customers using AVNM require visibility into the changes made to their network to audit events, analyze changes over time, and troubleshoot any issues. This capability is now a reality – Azure Virtual Network Manager event logging<\/a> is now in preview.<\/p>\n\n\n\n

Azure Virtual Network Manager (AVNM) uses Azure Monitor for telemetry collection and analysis like many other Azure services. AVNM now provides event logs that you can interact with through Azure Monitor\u2019s Log Analytics tool<\/a> in the Azure Portal, as well as through a storage account. You can also send these logs to an event hub or partner solution.<\/p>\n\n\n\n

With this preview announcement, Azure Virtual Network Manager will provide a log category for network group membership change. In the context of AVNM, network groups are defined by the user to contain virtual networks. The network group membership change log category tracks when a particular virtual network is added to or removed from a network group. This can be used to track network group membership changes over time, to capture a snapshot of a particular virtual network\u2019s network group membership, and more.<\/p>\n\n\n\n

\n

Additional information:<\/p>\nMonitor Azure Virtual Network Manager changes with event logging | Azure Blog and Updates | Microsoft Azure<\/a>
Azure Virtual Network Manager documentation | Microsoft Learn<\/a>
<\/cite><\/blockquote>\n\n\n\n

Protect against cyberattacks with the new Azure Firewall Basic<\/h3>\n\n\n\n

Cyberattacks continue to rise across businesses of all sizes as attackers are adapting their techniques and increasing the complexity of their operations. The risk of these attacks is significant for small and medium businesses (SMBs) as they usually don\u2019t have the specialized knowledge or resources to protect against emerging threats and face more challenges when recovering from an attack. In a recent Microsoft survey, 70 percent of SMBs think cyber-threats are becoming more of a business risk and nearly one in four SMBs stated that they had a security breach in the last year.<\/p>\n\n\n

\n
\"Diagram
High-level overview of Azure Firewall Basic capabilities<\/figcaption><\/figure>\n<\/div>\n\n\n

It offers Layer 3\u2013Layer 7 filtering and alerts on malicious traffic with built-in threat intelligence from Microsoft threat intelligence. As a cloud-native service, Azure Firewall Basic is simple to deploy with a few clicks and seamlessly integrates with other Azure services, including Microsoft Azure Firewall Manager<\/a>, Azure Monitor, Azure Events Hub, Microsoft Sentinel, and Microsoft Defender for Cloud.<\/p>\n\n\n\n

Since public preview, we have seen a wide adoption of the Azure Firewall Basic. Customers stated the simplicity and ease of use of the Azure Firewall as one of the key benefits for choosing Azure Firewall Basic. Azure Firewall is offered in three SKUs to meet a wide range of use cases and needs<\/p>\n\n\n

\n
\"Table,
Closer look at the features across the three Azure Firewall SKUs<\/figcaption><\/figure>\n<\/div>\n\n\n

Azure Firewall Basic pricing includes both deployment and data processing charges for both virtual network and virtual hub scenarios. Pricing and billing for Azure Firewall Basic with virtual hub will be effective starting May 1, 2023.<\/p>\n\n\n\n

\n

Additional information:<\/p>\nProtect against cyberattacks with the new Azure Firewall Basic | Azure Blog and Updates | Microsoft Azure<\/a>
Azure Firewall \u2013 Cloud Network Security Solutions | Microsoft Azure<\/a>
Azure Firewall <\/a>documentation <\/a>| Microsoft Learn<\/a>
Azure Firewall <\/a>Manager <\/a>| Microsoft Azure<\/a>
Azure Firewall <\/a>Manager <\/a>documentation | Microsoft Learn<\/a>
Quickstart: Create <\/a>an <\/a>Azure Firewall and IP Groups – Resource Manager template | Microsoft Learn<\/a>
Deploy & <\/a>configure <\/a>Azure Firewall Basic and policy using the Azure portal | Microsoft Learn<\/a>
<\/cite><\/blockquote>\n\n\n\n

Automate your attack response with Azure DDoS Protection solution for Microsoft Sentinel<\/h3>\n\n\n\n

Azure delivers numerous network security products that aid organizations in safeguarding their applications: Azure DDoS Protection<\/a>, Azure Firewall<\/a>, and Azure Web Application Firewall (WAF)<\/a>. Customers can deploy and configure each of these services individually to heighten the security stance of their safeguarded environment and application in Azure. While each product offers distinct capabilities to tackle specific attack vectors, the most significant advantage lies in their combined power. These three products provide more extensive protection when used in conjunction. In fact, to combat contemporary attack campaigns, a product suite should be employed, and security signals from one service should be correlated with another to detect and prevent multi-vector attacks.<\/p>\n\n\n\n

The latest addition to this portfolio is  Azure DDoS Protection Solution for Microsoft Sentinel<\/a>. It allows customers to identify bad actors from Azure\u2019s DDoS security signals and block possible new attack vectors in other security products, such as Azure Firewall.<\/p>\n\n\n\n

\n

Additional information:<\/p>\nAutomate <\/a>your attack response with Azure DDoS Protection solution for Microsoft Sentinel | Azure Blog and Updates | Microsoft Azure<\/a>
Azure DDoS <\/a>Protection <\/a>Overview | Microsoft Learn<\/a>
What is Azure Web Application Firewall on Azure Application Gateway? – Azure Web Application Firewall | Microsoft Learn<\/a>
What is Microsoft <\/a>Sentinel<\/a>? | Microsoft Learn<\/a>
New Azure <\/a>DDoS <\/a>Solution for Microsoft Sentinel – Microsoft Community Hub<\/a><\/cite><\/blockquote>\n\n\n\n

Connect, secure, and simplify your network resources with Azure Virtual Network Manager<\/h3>\n\n\n\n

Enterprise-scale management and configuration of your network resources in Azure are key to keeping costs down, reducing operational overhead, and properly connecting and securing your network presence in the cloud. We are happy to announce Azure Virtual Network Manager<\/a> (AVNM), your one-stop shop for managing the connectivity and security of your network resources at scale, is <\/strong>generally available.<\/strong><\/p>\n\n\n

\n
\"High
High level diagram of the process to enforce security rules throughout an organization<\/figcaption><\/figure>\n<\/div>\n\n\n

Common use cases for AVNM include the following and can be addressed by deploying AVNM\u2019s connectivity and security admin configurations onto your defined network groups:<\/p>\n\n\n\n