March 12, 2025
How do you plan a hub & spoke architecture? Based on much of what I have witnessed, I think very few people do any planning at […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Blog
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- access control list
- acls
- Active Directory
- Active Directory Management
- Active Directory Sync
- AD DS
- AD DS Migration
- AD Health Check
- Adversary-in-the-middle (AiTM)
- Agentic AI
- agic
- AI
- AI + Machine Learning
- ai foundry
- ai search
- ai services
- AKS
- AMA
- AML
- analytics
- Annual Channel
- API Management
- API manager
- api-development
- APIs
- App Configuration
- App Control
- app service
- app-modernization
- Application Gateway
- application gateway for containers
- Application Insights
- application security groups
- Arc Jumpstart
- arm
- Article
- Artificial Intelligence
- ASP.NET Core
- aspire
- Audio Notes
- authentication
- authorization
- Auto Mode
- automation
- Automation Account
- Availability Zones
- AVD
- AVD admin tips
- AVD best practices
- AVD changes 2025
- AVD clipboard redirection
- AVD configuration
- AVD drive redirection
- AVD host pool settings
- AVD Optimization
- AVD printer redirection
- AVD redirection
- AVD security update
- AVD Setup
- AVD Storage Optimization
- AVD tutorial
- AVD USB redirection
- AVM
- avnm
- aws
- AZ-900
- Azure
- Azure Access Control
- Azure Action Groups
- Azure Active Directory
- Azure Activity Logs
- Azure AD
- Azure AD Connect
- Azure AD Sync
- Azure Adaptive Cloud
- Azure Admin Guide
- Azure Administration
- azure adoption
- Azure AI
- Azure AI Foundry
- Azure AI Search
- azure ai serach
- azure ai studio
- Azure ai-services
- Azure Alerts
- azure application delivery
- Azure Application Gateway
- azure application gateway for containers
- Azure Archive Storage
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Bastion demo
- Azure Bastion Developer Tier
- Azure Bastion free tier
- Azure Bastion Linux
- Azure Bastion Setup
- Azure Bastion Tutorial
- Azure Bastion walkthrough
- Azure Bastion Windows
- Azure Best Practices
- Azure Bicep
- Azure Billing Models
- Azure Blob Storage
- Azure Blob vs File Storage
- Azure Blob vs File vs Disk
- Azure Cache for Redis
- Azure Chaos Studio
- Azure CLI
- Azure CLI SSH
- Azure Cloud
- Azure Cloud Architect
- Azure Cloud Computing
- Azure cloud desktop
- Azure Cloud Identity
- Azure Cloud Security
- Azure Cloud Storage
- Azure Cloud Tutorial
- Azure Compliance
- Azure Compute Fleet
- Azure Conditional Access
- Azure confidential ledger
- Azure Configuration Tutorial
- Azure Container Apps
- Azure Container Instances
- Azure Container Registry
- Azure Container Storage
- azure copilot
- Azure Cosmos DB
- Azure Data Box
- Azure Data Explorer
- Azure Data Factory
- Azure Data Lake Storage
- Azure Data Management
- Azure Data Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Database Migration service
- Azure Databricks
- Azure Deployment Environments
- Azure DevOps
- Azure DevTest Labs
- Azure Disk Storage
- Azure DNS
- Azure Domain Services
- Azure Dynamic Alerts
- Azure Edition
- Azure Elastic SAN
- Azure Enterprise Applications
- Azure Entra ID
- Azure Entra Migration
- azure essentials
- Azure Essentials Show
- Azure ExpressRoute
- Azure File Share
- Azure File Share Best Practices
- Azure File Share Configuration
- Azure File Share Explained
- Azure File Share Metrics
- Azure File Share Optimization
- Azure File Share Performance
- Azure File Shares
- Azure File Storage
- Azure File Storage Comparison
- Azure File Storage Pricing
- Azure Files
- Azure Files Demo
- Azure Firewall
- Azure Firewall Manager
- azure firewall policy
- azure fleet
- Azure Front Door
- Azure Functions
- Azure Functions Flex Comsumption
- Azure Global
- Azure Governance
- Azure HDInsight on Azure Kubernetes Service (AKS)
- Azure Health Data Services
- azure hybrid
- Azure Hybrid Benefit
- Azure Hybrid Identity
- Azure Identity Management
- Azure Identity Services
- Azure Image Builder
- Azure Infrastructure
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Lab
- Azure Load Testing
- Azure Local
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- Azure Machine Learning
- azure management
- Azure Maps
- Azure Metrics
- Azure Migrate
- Azure Monitor
- Azure Monitor Agent
- Azure Monitor Workbooks
- Azure NAT Gateway
- Azure Native Client
- Azure NetApp Files
- azure network monitoring
- Azure Network Security
- Azure Networking
- Azure Open AI
- azure openai
- azure openai service
- Azure Performance Monitoring
- Azure Performance Optimization
- Azure Platform
- Azure Policy
- Azure Portal
- Azure Portal Tutorial
- Azure PowerShell
- Azure Private Access
- Azure Private Applications
- Azure Private Link
- Azure Profile Management
- azure rbac
- Azure RDP settings
- Azure RDP without public IP
- Azure Red Hat OpenShift
- azure routing
- Azure Secure Connectivity
- Azure Security
- Azure Security Best Practices
- Azure Sentinel
- Azure Service Bus
- Azure Setup
- Azure SignalR Service
- Azure Site Recovery
- Azure Skill Sprint
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Edge
- Azure SQL Managed Instance
- Azure SSH without public IP
- Azure Stack
- Azure Stack HCI
- Azure Static Alerts
- Azure Step-by-Step Guide
- Azure Storage
- Azure Storage Access Tiers
- Azure Storage Access Tiers Explained
- azure storage account
- Azure Storage Account Setup
- Azure Storage Actions
- Azure Storage Alerts
- Azure Storage Best Practices
- Azure Storage Cost Optimization
- Azure Storage Cost Savings
- Azure Storage Demo
- Azure Storage Explained
- Azure Storage for Beginners
- Azure Storage IOPS
- Azure Storage Monitoring
- Azure Storage Options
- Azure Storage Overview
- Azure Storage Performance
- Azure Storage Pricing
- Azure Storage Tips
- Azure Storage Tutorial
- Azure Storage Types
- Azure Subscription
- Azure Synapse Analytics
- azure traffic analytics
- Azure Traffic Forwarding
- azure training
- Azure Troubleshooting
- Azure Tutorial
- Azure Tutorials
- Azure Virtual Desktop
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure VM
- Azure VM connection
- Azure VM RDP
- Azure VM Security
- Azure VM Setup
- Azure VMware Solution
- Azure VNet Bastion
- Azure VPN Alternative
- Azure Well-Architected Framework
- azure-ad-b2c
- azure-arc
- azure-b2c
- AzureAIFoundry
- AzureAISearch
- azurebicep
- azuredevops
- azureopenai
- azureverifiedmodules
- Bastion Host
- beginners
- best practices
- bgp
- Bicep
- biceplang
- Bing Search
- Blazor
- Blizzard
- blog
- Book Review
- branch
- Branches
- Business
- Business Intelligence
- C#
- Canceled
- CCAK
- Certificate of Cloud Auditing Knowledge
- Certification
- Certifications
- Chat GPT
- chatgpt
- client-credentials-flow
- Cloud
- Cloud Architect
- Cloud Audit
- Cloud Cultures
- Cloud Directory Sync
- Cloud Foundation
- Cloud Governance
- Cloud Mechanix
- Cloud Migration
- Cloud Network Security
- cloud networking
- Cloud Recovery
- Cloud Rewind
- cloud security
- Cloud Security Alliance
- Cloud Services
- Cloud Storage
- Cloud Storage Tiers
- cloud terminology
- cloud-computing
- CloudFamily
- Cmd
- cmk
- code
- coding
- Command Line
- community
- Community IT event
- Commvault
- Compliance
- compute
- Conditional Access
- Conditional Access Policies
- Conference
- Connect to Azure VM
- container networking
- containers
- cosmosdb
- Cost Management
- cost-optimization
- Course
- credential theft
- cryptocurrency mining
- cryptojacking
- csharp
- custom error
- custom-policies
- Customer Managed Key
- Cyber Security
- Cybersecurity
- CyberSecurity Certifications
- Cybersecurity trends
- D365
- D365 CE
- D365 F&O
- D365 Sales & CRM
- dashboards
- data
- Data Protection
- Databases
- databricks devops
- Dayforce
- Deleted
- dependabot
- Deploy Azure Bastion
- deployment
- deployment stacks
- dev-containers
- Developer Life
- Developer Tools
- Development
- devops
- DevSecOps
- Diagnostic Settings
- diagnostics
- distributed-systems
- dns
- DNS Configuration
- Document Summarisation
- document-intelligence
- Domain Controller
- Domain Controller Demotion
- dotnet
- ECMA2
- EF Core
- EKS
- Elastic Search
- Encryption
- Endpoint management
- Enterprise File Sharing
- Enterprise IT
- enterprise-architecture
- entra
- Entra Configuration
- Entra Connect
- Entra Connect High Availability
- Entra Connect Migration
- Entra Connect Staging Mode
- Entra Connect Step by Step
- Entra Global Secure Access
- Entra ID
- Entra Internet Access
- Entra Private Access
- Entra Private Access Tutorial
- Entra Suite
- entra-external-id
- epac
- error
- error-message
- Event
- Event Grid
- event-driven-architecture
- Events
- Exam Prep
- Exchange Online
- Exec posts
- ExpressRoute
- expressroute local
- Extended Network for Azure
- external-id
- external-identity
- fail()
- Features
- federation
- Fedora
- fiddler
- File Sharing Security
- FIM
- fine-tuing
- Fine-tuning
- finops
- Firewall
- Firewall Policy
- firewall rules
- Flex Comsumption Deployment
- flow
- Forrester Waves
- foundry
- Free Azure Bastion
- FSLogix Best Practices
- FSLogix Configuration
- FSLogix Performance
- FSLogix Tips
- FSLogix Troubleshooting
- FSMO Roles
- Function Calling
- gateway api
- genai
- General
- General Development
- Generative AI
- Git
- GitHub
- GitHub Actions
- Global Secure Access
- governance
- gpt4o
- Grafana
- grafana dashboards
- granfeldt
- Graph
- graph-explorer
- gwctl
- HashiCorp
- HashiCorp Ambassador
- Have I Been Pwned
- header
- Helm
- host
- Hot Cool Cold Archive Tiers
- How-to
- http route
- hub
- Hub & Spoke
- hub-and-spoke
- Hugo
- Hybird
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- Hybrid Cloud Authentication
- Hybrid Identity
- Hyper-V
- IaC
- icmp
- identity
- Identity and access management
- Identity-Based Security
- In development
- In preview
- influencers
- Information Technology
- infrastructure
- Infrastructure As Code
- infrastructureascode
- ingress controller
- Integration
- Internet of Things
- Intune
- Intune tips
- Investor Relations
- IoT
- ipam
- ISACA
- IT administration
- IT conference 2025
- IT networking event
- IT Pro
- IT Professionals
- IT Training
- IT Tutorials
- java
- jfk-assassination
- John Towles interview
- jwt-token
- K8s
- KDC Proxy
- KEMP
- Kerberos Authentication
- Key Vault
- kinde
- KQL
- kubernetes
- kubernetes fleet
- kubernetes gateway
- kubernetes gateway api
- kubernetes networking
- Kusto
- kusto query language
- Lab
- Lambda functions
- Landing Zones
- Launched
- learning
- LINUX
- Linux Server
- Linux Virtual Machines
- Linux VM
- Living off the land
- LLM
- Load Balancer
- load balancing
- Loadmaster
- Log Alerts
- Log Analytics
- Log Analytics Workspace
- Logic Apps
- Long-Term Servicing Channel
- macOS
- Managed Prometheus
- Management
- Management and Governance
- Management Groups
- masking
- MCP
- micro-segmentation
- microsegmentation
- Microsoft
- Microsoft 365
- Microsoft 365 Copilot
- Microsoft 365 Security
- Microsoft Azure
- Microsoft Azure Tutorial
- Microsoft Build
- Microsoft Cloud
- Microsoft Cloud Security
- Microsoft Cloud Storage
- Microsoft Connect
- Microsoft Copilot for Azure
- Microsoft Copilot for Security
- Microsoft Cost Management
- Microsoft Defender
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra Domain Services
- Microsoft Entra ID
- Microsoft Entra ID (formerly Azure AD)
- Microsoft Fabric
- Microsoft Graph
- Microsoft Ignite
- Microsoft Ignite 2024
- Microsoft Intune
- microsoft mvp
- Microsoft Security
- Microsoft Sentinel
- Microsoft SQL Server
- Microsoft Training
- Microsoft Visual Studio
- microsoft-support
- MicrosoftBuild
- Migrate Entra Connect
- Migration
- MIM
- Misc
- MITRE ATT&CK
- ML
- Mobile
- Modern Workplace
- modules
- msal
- msee
- MSEvents
- MSIgnite2024
- multi-cluster load balancing
- multi-cluster networking
- multi-region
- multicloud
- multiregion
- MVPBuzz
- native-authentication
- network
- Network Address Translation
- network rules
- Network security
- network security group
- network security rules
- Network Traffic Filtering
- network virtual appliance
- Network Watcher
- network-tracking
- networking
- Networking Basics
- new
- News
- NodeJS
- NoSQL
- NSG
- nuget
- nva
- nxdomain
- nxdomainredirect
- observability
- oidc
- On-Premises AD
- Open AI
- open source
- open-api
- openai
- opensource
- Operating System
- OperatingSystem
- Operational Excellence
- overlay cni
- PaaS networking
- Packer
- path prepending
- patterns
- Performance Efficiency
- Playbook
- Pluralsight
- politics
- postgresql
- postman-testing
- Power Apps
- power automate
- Power BI Embedded
- power-platform
- powershell
- PowerShell Active Directory
- presentations
- Press Releases
- Pricing & Offerings
- Privacy
- private dns
- Private Endpoint
- private link
- private networking
- privatelink
- privatelinkrealitybites
- Process Improvement
- Productivity
- profile-edit
- programming
- Progress
- Promote DC
- Prompt Engineering
- Prompt Flow
- Prototyping
- Provisioned V1 vs V2
- Provisioned V2 Azure
- public cloud networking
- Public Speaking
- pullrequest
- python
- Quick Post
- ransomware
- Raspberry Pi
- RBAC
- RDP over TLS
- Recent News
- recording
- Regions & Datacenters
- Reliability
- Remote code execution
- Remote Desktop Azure
- Remove Domain Controller
- Resiliency
- resolution
- responsible-ai
- ResponsibleAI
- REST API
- Retirements
- reverse proxy
- route table
- router
- routeserver
- routing
- s2s vpn
- SaaS
- SAML
- SDK and Tools
- SdkAndTools
- SDKs
- Secure Azure Connections
- Secure Azure VM Access
- Secure File Sharing
- Secure Future Initiative
- Secure Internet Access
- Secure Remote Access
- Secure SMB Access
- Secure Web Gateway
- security
- security admin rules
- Security Baseline
- Securtiy
- Semantic Kernel
- Sentinel
- Server Manager
- Service Endpoint
- service endpoint policy
- Service Management
- Services
- SIEM
- signature
- site-to-site
- Sleet
- SMB Configuration
- SMB over QUIC
- SMS
- snyk
- SOAR
- software-architecture
- Software-Defined Networking
- software-design
- software-developer
- software-development
- speaking
- Speech
- Speech to Text
- spoke
- sql
- SQL Interview
- SQL Server
- SQL Server on Azure Virtual Machines
- SSH Azure VM
- Star Blizzard (SEABORGIUM)
- static code analysis
- Static IP Azure
- storage
- Storage Accounts
- Storage Metrics
- Storage Replicas
- Storm
- Survey
- swagger
- Syslog
- system administrator
- Tech conference Dallas
- Tech Guide
- tech tip
- Tech Tutorial
- Technical
- Technology
- terminology
- Terraform
- Terraform Tests
- test
- testing
- Text Analytics
- Thomas Maurer
- thought-leadership
- Threat Detection
- TLS 1.3 Encryption
- totp
- trace
- traffic analytics
- traffic filtering
- Traffic Manager
- traffic visibility
- Transaction Optimzed
- troubleshooting
- tutorial
- Uncategorized
- updated
- user-defined route
- User-Defined Routing
- validation
- VDI
- VDI Solutions
- Video
- Virtual desktop infrastructure
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- virtual network flow logs
- Virtual Network Gateway
- virtual network service endpoint
- Virtual WAN
- Virtualization
- Visual Studio
- VNet
- VNet Flow Logging
- vnet flow logs
- vnet service endpoint
- vpn
- VPN Alternative
- VPN Gateway
- vpn site-to-site
- vscode
- vwan
- Web
- web app
- web application firewall
- Web Content Filtering
- Web Filtering Policy
- webapp
- Well-Architected
- Well-Architected Framework
- WellArchitectedFramework
- Windows
- Windows 11
- Windows 365
- Windows AD
- Windows Admin Center
- Windows Console
- Windows Server
- Windows Server 2022
- Windows Server 2025
- Windows Server Administration
- Windows Server Azure Edition
- Windows Server Comparison
- Windows Server Datacenter
- Windows Server Deployment
- Windows Server Features
- Windows Server Hotpatching
- Windows Server Licensing
- Windows Server Management
- Windows Server Service Channels
- Windows Server Standard
- Windows Server Summit
- Windows Server Tutorial
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- Windows Virtual Machines
- Workbooks
- Workplace Ninjas
- Workplace Ninjas US
- workspace-ip-access
- WSL
- XDR
- yaml
- Year In Review
- Zero Trust
- Zero Trust Azure
- Zero Trust Networking
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Daniel Bradley
- Daniel McLoughlin
- Daniel Scott-Raynsford
- Darren Robinson
- David O'Brien
- Dieter Gobeyn
- Freek Berson
- George Ollis
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Jesse (JSON) Loudon
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Mark Tinderholt
- Matt Felton
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rod Trent
- Rory Braybrook
- Roy Kim
- Sam Cogan
- Sarah Lean
- Simon Waight
- Stanislav Zhelyazkov
- Sucheta Gawade
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Will Velida
March 7, 2025
Published by Aidan Finn on March 7, 2025
Categories
In this post, I am going to share a process for designing a hub virtual network for a hub & spoke secured virtual network deployment in […]
March 5, 2025
Published by Aidan Finn on March 5, 2025
Categories
In this post, I want to discuss the importance of designing and implementing micro-segmentation in Azure networks. Repeating The Same Mistakes In 2002-2003, the world was […]
February 24, 2025
Published by Aidan Finn on February 24, 2025
Categories
In this post, I want to explain why routing is so important in Microsoft Azure. Without truly understanding routing, and implementing predictable and scaleable routing, you […]
December 11, 2024
Published by Aidan Finn on December 11, 2024
Categories
In this post, I want to discuss how I recently took over the management of an existing Azure Firewall using Firewall Policy/Azure Firewall Manager and Bicep. […]