All Azure Technologies @ one Place

Set up Active/Passive Palo Alto DataCenter Firewall on Azure - Part Two

10/12/2020

In the Previous Post, I've explained how to setup Palo Alto VMs in the same resource group including the network configuration and other configuration.

In this post, I will explain how to configure the Active and Passive Node from Azure side

Take a Look on the below design which is shared on Palo Alto Portal, as we will follow almost the same

4 Comments

Connect and Manage On-Prem Environments From Multi-Cloud Environments

10/12/2020

0 Comments

For a long time I was thinking about hybrid cloud deploymentand, and how it becomes a very common option either azure to azure or On-premises, AWS, Google cloud, so I decided to share with you all the way to connect between with pro and Con of each one.

0 Comments

Set up Active/Passive Palo Alto DataCenter Firewall on Azure - Part One

10/8/2020

6 Comments

One of my customers has requested to deploy HA Palo Alto Firewalls on Azure, and since that time I suffered multiple time as I didn't find enough resources explaining the same so I decided to write this post and share my experience with everyone

Before I start I will explain the current Azure architecture Design I have. The below design explaining Microsoft best practices for deploying resources across Subscriptions and VNETs

read more :
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/migrate/azure-best-practices/migrate-best-practices-networking

6 Comments

azure firewall costly? try fortigate

6/24/2020

10 Comments

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

As I haired from a few customers that Azure firewall is a little bit expensive! and some of them they don't have a budget for test/dev environment,as it cost (approximately $100 monthly, per appliance). This price gets compounded if you need to deploy multiple Azure Firewall appliances per regional VNet

In this post we will explain how to deploy FortiGate NGFW for Azure, you can deploy the FortiGate for Azure as a virtual appliance in Azure cloud (infrastructure as a service)

10 Comments

Azure Front Door VS Azure Traffic Manager VS Azure Application Gateway VS Azure Load Balancer VS Content Delivery Network (CDN)

1/29/2019

16 Comments

Cloud native integrated
Enables real-time hyperscale for single domain microservice apps where DNS traffic management cannot
Provides applications with premium edge performance acceleration and caching via Microsoft’s unique global WAN
Customers get a single pane of glass for service orchestration and global traffic optics.

Main Feature:

Accelerate application performance: Front Door ensures that your end users promptly connect to the nearest Front Door POP (Point of Presence)
Increase application availability with smart health probes
URL-based routing: Route Matching
Configure Azure Front Door Service to either direct each web site to its own backend pool or have various web sites directed to the same backend pool
Cookie-based session affinity
(SSL) termination
APP layer security
Support IPv6 and HTTP/2
Global LB with HTTPS as recommended traffic

Note: It can be used with On-Prem Server (Example Web server hosted on your local environment)

Last Update: 10/10/2020

First of All Let’s understand each service:

Azure Front Door: Microsoft Azure Front Door (AFD) is a service that offers a single global entry point for customers accessing web apps, APIs, content and cloud services. Through a single pane of glass and global infrastructure, AFD enables Azure customers to build, manage and secure their global applications and content. In other words Azure Front Door Is a global load balancing, but it is doing more by enhancing performance

16 Comments

Azure Virtual Wan - Network

1/28/2019

1 Comment

Azure Virtual WAN is a networking service that provides optimized and automated branch-to-branch connectivity through Azure.

Connect any number of branches with multiple connections
Auto provisioning from branch office to Azure
Automated configuration download and connection enablement
Built for throughput and scalability
Unified monitoring and management CPE branch devices managed by a growing ecosystem of SD-WAN and VPN partners

Virtual WAN provides large-scale site-to-site connectivity and is built for throughput, scalability, and ease of use. ExpressRoute and point-to-site connectivity functionality is currently under Preview. CPE branch devices auto-provision and connect into Azure Virtual WAN. These devices are available from a growing ecosystem of SD-WAN and VPN partners

1 Comment

Author

Mohammad Al Rousan is a Microsoft MVP (Azure), Microsoft Certified Solution Expert (MCSE) in Cloud Platform & Azure DevOps & Infrastructure, An active community blogger and speaker. Al Rousan has over 8 years of professional experience in IT Infrastructure and very passionate about Microsoft technologies and products.

Top 10 Microsoft Azure Blogs