Skip to content
TrackPodcasts
educationApr 4, 202623:15pending

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 5: Azure Network Infrastructure and Security

CyberCode Academy

About this episode

In this lesson, you’ll learn about securing Azure network infrastructure and managing hybrid connectivity in Microsoft Azure:Remote Access Management
  • Applying operational security best practices:
    • Using dedicated admin workstations to protect credentials
  • Securely accessing virtual machines using:
    • Azure Bastion for RDP/SSH over SSL via the Azure portal
  • Eliminating exposure of public IPs for management access
Hybrid Networking Solutions
  • Connecting on-premises infrastructure to Azure:
    • Azure VPN for encrypted tunnels over the public internet
    • ExpressRoute for private, high-speed enterprise connections
    • Network Virtual Appliances (NVAs) for advanced third-party firewall and security capabilities
  • Choosing the right solution based on:
    • Performance requirements
    • Security needs
    • Cost considerations
Azure Firewall Implementation
  • Deploying Azure Firewall as a centralized security layer
  • Configuring:
    • Network rules (IP + ports filtering)
    • Application rules (FQDN-based filtering)
  • Integrating within a hub-and-spoke architecture for:
    • Centralized traffic inspection
    • Simplified security management
Global Application Delivery & Protection
  • Using Azure Front Door for:
    • Layer 7 load balancing
    • SSL termination
    • High-performance global routing
  • Enhancing protection with Azure Web Application Firewall (WAF):
    • Blocking SQL injection and XSS attacks
    • Applying geo-filtering policies
    • Mitigating DDoS attacks
Hands-On Implementation
  • Deploying multi-region backend infrastructure
  • Configuring:
    • Custom domains with SSL certificates
    • WAF policies for traffic filtering and threat mitigation
Key Takeaways
  • Secure access starts with controlled entry points (like Azure Bastion)
  • Hybrid connectivity requires balancing security, speed, and cost
  • Centralized security (Azure Firewall + hub-spoke) improves visibility and control
  • Edge services (Front Door + WAF) are critical for performance and protection at scale
This lesson equips you with the knowledge to design secure, scalable, and globally accessible Azure network architectures.

You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy

Get every episode summarized

Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.

Email me new episodes

Free for 3 shows. No card needed.

Hosts & guests

No transcript yet

This episode has not been transcribed. Request it and it moves to the front of the queue.

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 5: Azure Network Infrastructure and Security

CyberCode Academy

0:00
23:15

More episodes

More from CyberCode Academy

View all episodes →

Course 42 - Mobile Malware Analysis Fundamentals | Episode 14: Architecture and...

CyberCode Academy

Sep 10, 202624:31pending

Course 42 - Mobile Malware Analysis Fundamentals | Episode 13: Designing and Arc...

CyberCode Academy

Sep 9, 202617:34failed

Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...

CyberCode Academy

Sep 8, 202628:08completed

Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...

CyberCode Academy

Sep 7, 202624:15completed