My blog about Azure and the Hybrid Cloud
Hi All, Welcome in this 3rd part of my Harden Nerdio Manager for Enterprise blog series. In this blog series I take a look at the security of the Nerdio Manager for Enterprise. In the previous posts I looked at the App Service and SQL. In case you missed those posts you can read them…
By default Azure virtual machine have outbound internet access. You might have the requirement of having a public ip on your resource for outbound connectivity. To avoid having to assign public ip’s on virtual machines, you can choose to use an Azure NAT gateway. If you enable NAT gateway all the devices in the subnet…
Azure Virtual Network Manager is a feature that is currently in public preview. It enables you to view your entire network design in a single pane of glass. You can manage and create network topologies across al your subscriptions using this feature. If you want to learn more about this feature go here In this…
So you have an Azure Virtual Desktop environment and you need to check something on a session host. These machines don’t have a public ip address so you need a way of connecting to it on the private ip address. You can use Azure Bastion and connect through the Azure portal or with the native…
Hello and welcome to my contribution for the Festive Tech Calendar. This community event is organised by the community for the community. This year they are raising money for Missing People. Check out the website to see all the participants from this year’s edition. Identity and security are 2 of the most important things in…
Hello and welcome to another Azure Virtual Desktop with Terraform blog post. In this blog I’ll show you how you can automate the deployment of private endpoints for AVD. Networking and security are 2 very important components in Azure. By default, the Azure Virtual Desktop is available through the internet. With the option to use…
Welcome in this 2nd part of this Harden Nerdio Manager for Enterprise blog series. In this blog series I take a look at the security of the Nerdio Manager for Enterprise. In the previous I looked at the App Service. In case you missed that post you can read it here. In part 2 I’m…
By default the Nerdio Manager for Enterprise is publicly available. I had the question to disable public access and to adhance the security of the entire Nerdio infrastructure. In this blog series I’ll walk you through the steps to do this. There are several components that we need to harden: App service SQL Keyvault Automation…
Hello and welcome to another blogpost about AVD in combination with Terraform. In this blogpost I’m gonna deploy an Azure Firewall with Terraform and apply the networking rules for AVD. First of all we need a vnet for the AVD session hosts. I prefer to create a vnet for AVD and create multiple subnets per…
Hello and welcome to my next blog in my Terraform series. In this blog I’ll show you how you can deploy a hub-spoke virtual network with the following components: Hub vnet 3 spoke vnets (Prod, Dev and Test) Hub subnets for Firewall, Vpn and Bastion Peerings between the Hub and Spokes Nsg’s for all vnets…