Sometimes we need to import rules to NSG from an Excell file. I had to do it to allow communication with Salesforce – so I had to implement IP whitelist according to this: https://help.salesforce.com/articleView?id=000003652&type=1. So the script to do it is here: $importFile = ‘Salesforce-nsg.csv’ $nsgname = ‘acobybylonsg-nsg’ $nsgrg = ‘acobybylonsg’ $subscription=’a3eaae72-4091-4bb6-8e79-ad91f956ac87′ $rulesArray = @() […]
Old version Azure Disk Encryption with Azure AD app uses Extension AzureDiskEncryption version 1.*. New Azure Disk Encryption uses Extension AzureDiskEncryption version 2.*. Switching from AAD application Encryption for this encrypted VM isn’t supported yet. Here is unofficial, not-supported way: On VM using PowerShell as an Admin – disable Encryption, first: manage-bde -status #write recovery […]
Sometimes we need to know what application is doing in our operating system. Some scenario when we need it: We run installer to install application and track what installer trying to launch. I used it to find all components during containerization third party application. I would like to know what exactly is doing during enabling […]
Azure Disk Encryption technology basis on Windows BitLocker technology– of course only for Windows VMs. Key for BitLocker is stored in Key Vault. Encryption Agent is responsible for transfer key from Key Vault to VM. We have two version old one that use Azure Active Directory (https://docs.microsoft.com/pl-pl/azure/security/azure-security-disk-encryption-prerequisites-aad) and new one without this (https://docs.microsoft.com/pl-pl/azure/security/azure-security-disk-encryption-windows). AAD version […]
Usługa Microsoft Azure Application Gateway oferuje rozwiązanie do równoważenia obciążenia protokołu HTTP, które działa w oparciu o równoważenie obciążenia warstwy 7. Może być wzbogacone o usługę Web Application Firewall, które zabezpieczy witrynę przed atakami takimi jak XSS lub SQL injection. Usługa jest wyjątkowo opłacalna, gdy porównamy cenę tejże usługi w chmurze z usługami On-Prem, gdzie […]