Azure network security documentation

Learn about the various Azure network security services available that provide security for your resources in Azure.

Overview

Azure network security overview

Concept

Azure best practices for network security

What's new

What's new in Azure Networking and Security?

Architecture

Azure Well-Architected Framework review - Azure Firewall

Concept

Azure Networking security blog

video

Azure network security webinars

Concept

Choose a secure network topology

Concept

Azure networking services overview

Get started

Azure Firewall

Native firewalling capabilities with built-in high availability, unrestricted cloud scalability, and zero maintenance

Azure Web Application Firewall

A cloud-native web application firewall (WAF) service that provides powerful protection for web apps

Azure DDoS Protection

Protect your applications from Distributed Denial of Service (DDoS) attacks.

Use cases and scenarios

Secure your perimeter

• Protect my outbound network connections
• Protect my inbound web application connections
• Implement a secure hybrid network

Secure your virtual networks

• Inspect traffic to a private endpoint
• Monitor and troubleshoot your end-to-end Azure network infrastructure
• Hub-spoke network topology in Azure
• Azure Network Virtual Application Firewall architecture

Protect your apps and services

• Protect my service from DDoS attacks
• Learn more about Azure DDoS Protection
• Introduction to Azure DDoS Protection
• Use Azure Firewall to help protect an Azure Kubernetes Service (AKS) cluster

Learn more about Azure network security

Scenarios

• Securely access my PaaS Services in Azure
• Create a private interface to connect to a service
• Connect a service using a private link
• Apply Zero Trust principles to a spoke virtual network with Azure PaaS Services
• Secure networks with Zero Trust
• Filter network traffic between Azure resources
• Secure access to Azure services
• Deploy security admin rules with Virtual Network manager
• Apply Zero Trust principles to a spoke virtual network in Azure
• Apply Zero Trust principles to a hub virtual network in Azure
• Implement the Zero Trust model
• Apply Zero Trust principles to an Azure Virtual WAN deployment

Training

• Introduction to Azure Private Link
• Design and implement private access to Azure Services
• Encrypt network traffic end to end with Application gateways
• Configure network security groups
• Secure and isolate access to Azure resources by using network security groups and service endpoints
• Connect my on-premises network to Azure with VPN gateways
• Design and implement network security
• Design solutions for network security
• Design and implement network monitoring

Architecture

• Zero-trust network for web applications with Azure Firewall and Application Gateway
• Azure Private Link in a hub-and-spoke network
• Guide to Private Link and DNS in Azure Virtual WAN
• Secure network access to Kubernetes
• Extend an on-premises network using ExpressRoute
• Securely managed web applications
• Mission-critical baseline architecture with network control
• Build the first layer of defense with Azure Security services
• Secure and govern workloads with network-level segmentation

Networking services

Network Foundations

Load balancing and Content Delivery

Hybrid connectivity

Network monitoring and management