Network integrations
Traditional enterprise networks are designed to provide users access to applications and data hosted in company operated data centers with strong perimeter security. However, the modern workplace increasingly uses services and data outside the corporate firewall. Apps and services moved to the cloud. Users need to access them from various work and personal devices.
Network solutions are an important piece of Zero Trust. They verify that the ingress and egress at the edge of the network is allowable and inspect traffic for malicious content. They support least privilege access and the principle of "assume breach" by allowing organizations to segment networks and only connect users to the segment of the network they need access to.
Zero Trust integration with Networks guidance
Independent Software Vendor (ISV) partners integrate with Microsoft's network solutions and bring their own security expertise to enhance the products.
In this article, we discuss our Network integration partners so customers can use familiar, best-in-breed, non-Microsoft security as a service (SECaaS) offerings to protect Internet access for their users. For more information about becoming an ISV partner, see Microsoft 365 Networking Partner Program.
Gateway Load Balancer
Gateway Load Balancer is a product in the Azure Load Balancer portfolio catered for high performance and high availability scenarios with non-Microsoft Network Virtual Appliances (NVAs). It enables you to easily deploy, scale, and manage NVAs.
Virtual WAN
Virtual WAN is a networking service that brings many networking, security, and routing functionalities together to provide a single operational interface. It provides a hub and spoke architecture with scale and performance built in for branches (VPN/SD-WAN devices), users (Azure VPN/OpenVPN/IKEv2 clients), ExpressRoute circuits, and virtual networks. It enables a global transit network architecture, where the cloud hosted network hub enables transitive connectivity between endpoints that might be distributed across different types of spokes.
Azure Web Application Firewall
Azure Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. WAF can be deployed with Azure Application Gateway, Azure Front Door, and Azure Content Delivery Network (CDN) service from Microsoft. WAF on Azure CDN is currently under public preview.
DDOS Protection
Azure DDoS Protection, combined with application design best practices, provides enhanced DDoS mitigation features to defend against DDoS attacks. Automatic tuning helps protect your specific Azure resources in a virtual network. Protection is simple to enable on any new or existing virtual network, and it requires no application or resource changes.
Azure Firewall Manager
Azure Firewall Manager is a security management service that provides central security policy and route management for cloud-based security perimeters.
Security partner providers integrated with Azure Firewall Manager so customers can use familiar, best-in-breed, non-Microsoft security as a service (SECaaS) offerings to protect Internet access for their users. Customers can secure a hub with a supported security partner and route and filter Internet traffic from Virtual Networks (VNets) or branch locations within a region. Hubs can be deployed in multiple Azure regions to get connectivity and security anywhere across the globe, using the security partner’s offering for Internet/SaaS application traffic and Azure Firewall for private traffic in the secured hubs.
The supported security partners are Zscaler, Check Point, and iboss.
If your solution connects with Microsoft 365, you can use the guidance from the Microsoft 365 Networking Partner Program to ensure that your solution follows Microsoft 365 network connectivity principles. The purpose of this program is to facilitate great customer experience with Microsoft 365 through easy discovery of validated partner solutions that consistently demonstrate alignment to key principles for optimal Microsoft 365 connectivity in customer deployments.