Kategorie: Microsoft Azure

Top 4 reasons for using Azure Security Center for partner security solutions

As customers expand the boundaries of their environments to hybrid cloud, they often prefer to bring their trusted partners with them. Azure Marketplace includes a variety of security solutions from leading vendors. Azure Security Center takes this a step further, by partnering with these vendors to provide an integrated experience in Azure, while relying on Marketplace for partner certification and billing.

Security Center integrates with Endpoint Protection (Trend Micro), Web Application Firewall (Barracuda, F5, Imperva and soon Microsoft WAF and Fortinet), Next Generation Firewall (Check Point, Barracuda and soon Fortinet and Cisco) solutions. And just last week at Microsoft Ignite, we released integration with Vulnerability Assessment (Qualys – preview) solutions. If you missed the Azure Security Center session where these integrations were highlighted, you can catch it on demand. During FY17, Security Center will both expand the number of partners within these existing categories and introduce new categories.

So, why use Security Center to deploy and monitor security solutions from partners?

Ease of deployment: Deploying a partner solution by following the Security Center recommendation is much easier. The deployment process can be fully automated using a default configuration and network topology, or customers can choose a semi-automated option to allow more flexibility and customization of the configuration.
Integrated Detections: Security events from partner solutions are automatically collected, aggregated and displayed as part of Security Center alerts and incidents. These events are also fused with detections from other sources to provide advanced threat detection capabilities.
Unified Health Monitoring and Management: Integrated health events allow customers to monitor all partner solutions at a glance. Basic management is available with easy access to advanced configuration using the partner solution.
Export to SIEM: Customers can now export all Security Center and partners’ alerts in CEF format to on-premise SIEM systems using Microsoft Azure Log Integration (preview)

Currently, to leverage this advanced level of integration, partner solutions must be deployed from Security Center, by following a recommendation. Partner packages that are deployed directly from the Azure Marketplace or through automation, are not yet supported. Security Center plans to add this support over the next year where partner solutions will be auto discovered and connected to Security Center, regardless of their mode of deployment.

Interested in learning more on Azure Security Center and its partner ecosystem integration?

Managing security recommendations in Azure Security Center
 Monitoring partner solutions with Azure Security Center
 Integrating Security Center alerts with Azure log integration (Preview)
 Security Resource Provider REST API Reference

Quelle: Azure

Azure Managed Cache and In-Role Cache Service shutdown reminder

As announced last December, we are on track to retire Azure Managed Cache service and Azure In-Role Cache support by November 30, 2016. We strongly suggest that all currently active users of these services to move off them as early as possible, before the deadline.

Azure Redis Cache, based on the popular open-source implementation, is a fully-managed and high-performance caching solution that supersedes the Managed Cache and In-Role Cache services. It offers more features and options. We recommend that you consider Redis Cache as a replacement for the caching needs in your application. We have updated the Migrate from Managed Cache Service to Azure Redis Cache documentation webpage to facilitate your migration efforts.

If you have any questions or need assistance, please feel free to contact us.
Quelle: Azure

Simpler Azure Management Libraries for Java – Beta 3

Beta 3 adds support for the following Azure services and features

Virtual machine scale sets
Load balancers
Parallel creation of virtual machines and other resources
Virtual machine extensions
Key vault and
Batch

https://github.com/azure/azure-sdk-for-java

In July, we announced a developer preview of the new, simplified Azure management libraries for Java. Our goal is to improve the developer experience by providing a higher-level, object-oriented API, optimized for readability and writability. Thank you for trying the libraries and providing us with plenty of useful feedback.

Create a Virtual Machine Scale Set

You can create a virtual machine scale set instance by using another define() … create() method chain.

VirtualMachineScaleSet virtualMachineScaleSet = azure.virtualMachineScaleSets()
.define(vmssName)
.withRegion(Region.US_EAST)
.withExistingResourceGroup(rgName)
.withSku(VirtualMachineScaleSetSkuTypes.STANDARD_D3_V2)
.withExistingPrimaryNetworkSubnet(network, "Front-end")
.withPrimaryInternetFacingLoadBalancer(loadBalancer)
.withPrimaryInternetFacingLoadBalancerBackends(backendPoolName)
.withPrimaryInternetFacingLoadBalancerInboundNatPools(natPool50XXto22)
.withoutPrimaryInternalLoadBalancer()
.withPopularLinuxImage(KnownLinuxVirtualMachineImage.UBUNTU_SERVER_16_04_LTS)
.withRootUserName(userName)
.withSsh(sshKey)
.withNewStorageAccount(storageAccountName1)
.withNewStorageAccount(storageAccountName2)
.withCapacity(2)
.create();

Create a Network Load Balancer

You can create a network load balancer instance by using another define() … create() method chain.

LoadBalancerloadBalancer=azure.loadBalancers().define(loadBalancerName)
.withRegion(Region.US_EAST)
.withExistingResourceGroup(rgName)
.definePublicFrontend(frontendName)
.withExistingPublicIpAddress(publicIpAddress)
.attach()

// Add a backend pool for HTTP
.defineBackend(backendPoolName)
.attach()

// Add a probe for HTTP
.defineHttpProbe(httpProbe)
.withRequestPath("/")
.withPort(80)
.attach()

// Add a load balancing rule that uses the above backend and probe
.defineLoadBalancingRule(httpLoadBalancingRule)
.withProtocol(TransportProtocol.TCP)
.withFrontend(frontendName)
.withFrontendPort(80)
.withProbe(httpProbe)
.withBackend(backendPoolName)
.attach()

// Add a NAT pool to enable direct VM connectivity for
// SSH to port 22
.defineInboundNatPool(natPool50XXto22)
.withProtocol(TransportProtocol.TCP)
.withFrontend(frontendName)
.withFrontendPortRange(5000,5099)
.withBackendPort(22)
.attach()
.create();

Sample Code

You can find plenty of sample code that illustrates management scenarios in Azure Virtual Machines, Virtual Machine Scale Sets, Storage, Networking, Resource Manager, Key Vault and Batch …

Service
Management

Virtual Machines

Manage virtual machine
Manage availability set
List virtual machine images
Manage virtual machines using VM extensions
List virtual machine extension images

Virtual Machines – parallel execution

Create multiple virtual machines in parallel
Create multiple virtual machines with network in parallel

Virtual Machine Scale Sets

Manage virtual machine scale sets (behind an Internet facing load balancer)

Storage

Manage storage accounts

Network

Manage virtual network
Manage network interface
Manage network security group
Manage IP address
Manage Internet facing load balancers
Manage internal load balancers

Resource Groups

Manage resource groups
Manage resources
Deploy resources with ARM templates
Deploy resources with ARM templates (with progress)

Key Vault

Manage key vaults

Batch

Manage batch accounts

Give it a try

You can run the samples above or go straight to our GitHub repo. Give it a try and let us know what do you think (via e-mail or comments below), particularly –

Usability and effectiveness of the new management libraries for Java?
What Azure services you would like to see supported soon?
What additional scenarios should be illustrated as sample code?

The next preview version of the Azure Management Libraries for Java is a work in-progress. We will be adding support for more Azure services and tweaking the API over the next few months.

You can find plenty of additional info about Java on Azure at http://azure.com/java.
Quelle: Azure

App Service Mobile Apps .NET Client SDK 3.0.1 release

We just rolled out Azure Mobile Client SDK 3.0.1 and Azure Mobile SQLiteStore 3.0.1! We are out of beta, fixed the Android SQLiteStore dependency issue, and unified our .NET client SDK versions. Learn more about the update at App Service Team Blog.
Quelle: Azure

Microsoft Cloud achieves Gov. of India’s provisional accreditation… in rare company

The Ministry of Electronics and Information Technology (MeitY) for the Government of India, announced that Microsoft is one of the first global cloud service providers to achieve MeitY’s provisional accreditation.  With this accreditation, Microsoft can now deliver a #cloud computing solution in India that provides truly innovative digital services to a wider range of customers. 

MeitY’s provisional accreditation empowers government agencies and departments in India to choose the Microsoft Cloud to advance their digital transformation, optimize IT operations, and transform societies.  The Microsoft Cloud provides industry-leading levels of security, privacy controls, compliance, and transparency for Indian government agencies to achieve higher efficiencies, with greater reliability and scalability.

MeitY is the key agency for IT related policies and guidelines.  It is the governing body that provides guidelines to all the public sector organizations, government funded and controlled organizations, state and local bodies, and state owned enterprises in India.  MeitY’s guidelines are then adopted by private sector organizations in regulated industries and other sectoral regulators which influences the criteria for the use of cloud services in all of India.

With this new accreditation, Microsoft can now do more to support the Government of India in its journey to provide transformational e-governance services, financial inclusion opportunities, quality healthcare, and education to billions of people in the country.
Quelle: Azure