Protecting Azure Public IP address

Question

Hello,
I'd like to know what basic/default protection is for Azure "Public IP address". How-to videos, M365 documentation, even tech vendors, all talk about what it is and create, create, and more create. There are no mentions of default protection of this SKU. I'd like to learn if there is default protection built in for this SKU and other options everyone is using to protect their Azure VNET.

Thanks in advance!
DTran

Answer 1

Hey Daniel,

I think you need to explore the Azure Security Baseline and the features for protecting the Azure Network Resources, azure-public-ip-security-baseline.

Also explore the Azure Security Control - mcsb-network-security

Hope this helps.
JS

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi @Daniel Tran ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are looking for best practises with respect to Azure Network Security.

Exclusively for Public IPs, we have DDoS IP Protection

Other Network Security features for other products include,

• Web Application Firewall for AFD and App gateway
• Azure Firewall for Traffic Routing and Inspection across Private Networks
• Azure Secured Hub for vWAN scenarios
• DDoS Network Protection
• NSGs for IaaS VMs and subnets

Other documents that may come handy are as follows,

• Azure Security
• Azure network security overview
• Microsoft Defender for Cloud JIT
• Azure Bastion for fully managed RDP/SSH
• Azure security best practices and patterns

I hope this helps.

Thanks,
Kapil

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.