This video goes over how to deploy an Azure VNet Gateway on an existing VNet and enable Point-to-Site (P2S) VPN connections using Azure AD to authenticate the client. A P2S connection allows clients to connect securely to an Azure Gateway and access resources on the private VNet. The video goes on to demonstrate how enable Multi-Factor Authentication with a Conditional Access policy or enforcing MFA per-user.Continue reading “Azure Point-to-Site VPN with Azure AD Authentication and MFA”
This video goes over how to deploy an Azure VNet Gateway on an existing VNet and enable Point-to-Site (P2S) VPN connections. A P2S connection allows clients to connect securely to an Azure Gateway and access resources on the private VNet. The video goes on to demonstrate how to create a root certificate and client certificates to use for authentication. After that, configuring the client is demonstrated as well as blocking a client by revoking a certificate.Continue reading “Azure Point-to-Site VPN with Certificate Based Authentication”
In this video I go over the benefits of using Azure Proximity Placement Groups and Accelerated networking with Azure IaaS VM’s. I start by explaining what Proximity Placement Groups are and how they work, then go over the basics of Accelerated Networking. After that, I deploy a Proximity Placement Group and accelerated networking and compare results with and without the features enabled.Continue reading “Proximity Placement Groups and Accelerated Networking”
Azure Spot Virtual Machines are an IaaS server option offered at a deep discount compared to pay-as-you-go and Reserved Instance pricing. This video walks through deploying the new Azure Spot VM’s with the Azure Portal. The video also gives an overview of what Azure Spot VM instances are and some considerations to using them.Continue reading “New! Azure Spot Virtual Machine”
This video that goes over how to enable and use Microsoft’s newly announced Global VNet Peering. This feature expands on existing VNet peering, allowing for connectivity between VNets in two different regions. More information can be found here
Commands used in this video are:
I had the pleasure of spending a significant amount of time elbows deep in a Remote Desktop Services deployment this week. As part of the effort, I published the RDS RDWeb IIS page with the Azure AD Application Proxy so MFA can be leveraged for remote desktop services.
Microsoft announced a new Azure Connectivity Check as part of the Network Watcher service. Below is the announcement from Microsoft:
A couple things to note before you use it:
First, you have to enable your subscription for Network Watcher. Do this by going into Network Watcher and selecting your subscription in the Overview blade. Go to the three dots on the right and enable your subscription.