1. Route web traffic using Azure CLI/*
appGatewayBackendPool
myAppGateway
myAGPublicIPAddress
/images/*
imagesBackendPool
videoBackendPool
/video/*
myVNet 1

2. Azure Application Gateway
HTTP
Setting
Backend Pool
App Gateway
frontend IP
x.x.x.x
VMs
HTTP/HTTPS
listener
Browser
Rule
VMSS
On-prem
Servers 2

3. Static Website Hosting in Azure Storage
HTTP
Setting
Azure GPv2 Storage Account +
Static Website Hosting Support
Azure
CDN
App Gateway
frontend IP
x.x.x.x
HTTP/HTTPS
listener
Browser
Rule
Asset Files
i.e. HTML, CSS, .png, .js 3

4. Static Website Hosting in Azure Storage
Azure GPv2 Storage Account +
Static Website Hosting Support
HTTP
Setting
App Gateway/WAF
frontend IP
x.x.x.x
Azure
CDN
Asset Files
i.e. HTML, CSS, .png, .js
HTTP/HTTPS
listener
Browser
Rule
HTTP
Setting
App Gateway/WAF
frontend IP
x.x.x.x
Azure
CDN
Web App Service
HTTP/HTTPS
listener
Asset Files
i.e. HTML, CSS, .png, .js
Browser
Rule
HTTP
Setting
Load Balancer & Backend VM
Scale Set Pool
App Gateway/WAF
frontend IP
x.x.x.x
Azure GPv2 Storage Account
Azure
CDN
HTTP/HTTPS
listener
Asset Files
i.e. HTML, CSS, .png, .js
Browser
Rule 4
Azure GPv2 Storage Account

5. Azure Application Gateway
ImageServerPool
/images/*
Contoso.com
VideoServerPool
/video/* 5

6. Azure Application Insights
Web Pages
Client apps AI
Application Insights
Alerts
HTTP
requests
Azure Monitor
Power BI
Your Web
Service AI
Visual Studio
Dependency Calls
Rest API
External
Services
Background
Services
Continuous
export AI

7. Static Website Hosting
HTTPS/HTTP
80/443
HTTP 80
Azure
Content Delivery
Network
Azure
Storage Account with
Static Website Hosting
Support
Azure
Application Gateway
Virtual Network
Resource Group 7

8. MS Ignite Sept. 2018 - Azure Firewall - BRK4029 - Azure Firewall and Best Practices
5/18/2019
L3-L7 Connectivity Policies
NAT, Network and Application traffic filtering rules allows Inbound/Outbound access
Spoke 1
Central VNet
Spoke 2
Azure Firewall
Spoke VNets
Azure to On-Prem traffic filtering
Traffic is denied by default 8
On-Premises
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. App Gateway Valid request XSS attack WAF Valid request Valid request
Web App Firewall - BRK Azure Firewall and Best Practices
5/18/2019
Site 1
Site 2
App Gateway
Valid request
XSS attack
WAF
Valid request
Valid request
SQL injection
L7 LB 9
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. 1 1 Identity & Access Management Encryption Network Security (SDN)
Security Management With Azure Services - BRK Azure security & management
5/18/2019 1 1
Identity & Access Management
Azure Active Directory
Multi-Factor
Authentication
Role Based Access Control
(Identity Protection)
Encryption
(Disks, Storage, SQL)
Azure Key Vault
Confidential
Computing
Network Security (SDN)
VNET, VPN, NSG
Application Gateway
(WAF), Azure Firewall
DDoS Protection
Standard
ExpressRoute
Threat Protection
Microsoft Antimalware
for Azure
Security Management
Azure Monitor
Azure Security Center
+ Partner Solutions 10
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.