Category Archives: DMZ

Microsoft Shares Interesting Secure Azure Network Design

Posted on by

Microsoft recently shared a detailed design for a secure network deployment in Azure, based on the United Kingdom’s cloud security principles. The focus of Microsoft’s article was on the UK, but we can use this design as a basis for other deployments.

The post Microsoft Shares Interesting Secure Azure Network Design appeared first on Petri.

Continue reading Microsoft Shares Interesting Secure Azure Network Design→

By how much does virtualizing a perimeter firewall reduce network security?

Posted on by

I am looking to set up a hardware firewall for my home network. However, I am but a poor lowly student so I’m looking to virtualise to reduce hardware costs.

Now for a diagram to explain what I have in my head (and also because I just like diagrams):

  +----------+
  | Internet |
  +----------+
       ‖
       ‖      Server running
       ‖        Hypervisor
+------O-------------------+      = and ‖ both represent network connections
|      ‖ WAN        DMZ    |
| +---------+   +--------+ |      The "O" symbol indicates a physical NIC
| | pfSense |===| Debian | |
| +---------+   +--------+ |      pfSense and Debian are both VMs
|      ‖ LAN               |
+------O-------------------+      The Debian VM will run an Apache server
       ‖
       ‖                          The Hypervisor ONLY exposes its management
    +-----+                       interface on the LAN NIC
    | LAN |
    +-----+

Now clearly having two physically separate machines is preferable to the above from a security standpoint, as the WAN attack surface is reduced. My question is by how much is the attack surface reduced?

I do not have an affinity for any particular hypervisor however given my testing so far the free VMware vSphere Hypervisor is looking to be the best.

Continue reading By how much does virtualizing a perimeter firewall reduce network security?→

Best Practices with Azure ARM Network Security Groups

Posted on by

Enterprise Network Hero

In this post about Azure network security group best practices, Aidan offers tips for creating, configuring, and associating network security groups (NSGs) in Azure Resource Manager or CSP.

The post Best Practices with Azure ARM Network Security Groups appeared first on Petri.

Continue reading Best Practices with Azure ARM Network Security Groups→