Seure Azure services

Question

Hi,

How can I keep my Azure resources secure and block unwanted IPs.

Thanks,
Vishnu

Answer 1

Hi @Vishnu ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are looking for best practises to block malicious IP in Azure.

As per @TP 's answer, Azure comprises of different range of IaaS and PaaS services, and it will be difficult to point at a single solution that could provide network security for every product.
However, I shall share the most commonly used solutions.

Exclusively for Public IPs, we have DDoS IP Protection

Most of the PaaS services come with their own network security configuration/settings.
For e.g. Configure Azure Storage firewalls and virtual networks

Along with this, you can also consider

• Private EndPoints
• Service EndPoints

Notable Network Security features for other products include,

• Web Application Firewall for AFD and App gateway
• Azure Firewall for Traffic Routing and Inspection across Private Networks
• The above as IDPS feature
• Azure Secured Hub for vWAN scenarios
• DDoS Network Protection
• NSGs for IaaS VMs and subnets

Other documents that may come handy are as follows,

• Azure Security
• Azure network security overview
• Microsoft Defender for Cloud JIT
• Azure Bastion for fully managed RDP/SSH
• Azure security best practices and patterns

I hope this helps.

Thanks,
Kapil

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Answer 2

Hi Vishnu,

Your question too broad to give solid specific answer, so I will say that in regards to Virtual Machine/Virtual Networks you can use Network Security Groups (NSG) and Azure Firewall to help secure them and block unwanted IPs.

Below is a training module you can complete on NSGs:

https://learn.microsoft.com/en-us/training/modules/configure-network-security-groups/

And here is training module on Azure Firewall:

https://learn.microsoft.com/en-us/training/modules/configure-azure-firewall/

If your question is about a service other than Virtual Machines, please let me know.

Thanks.

-TP