It is possible to create a private network inside a cloud environment that is fully isolated from the external world? If you want to find out the response to this question that you should join the session.

2. MCP/MCTS
Radu
Vunvulea
Technology
enthusiastic
Azure MVP
Blogger
Speaker
Open
minded
Geek

4. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing

5. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing

6. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing

7. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
!

8. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM

9. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet

10. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

11. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

12. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

13. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

14. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

15. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

16. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

17. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

18. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

19. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

20. DBDB
Storage
Storage
Storage
VM
Storage
VM
VM
Backup
Audit
Security
Center
Monitor
ing
VM
VM
VM
Subnet
Subnet
Virtual
Appliance

21. IN & OUT 53 DNS traffic cannonical port Allowed
IN 3389 Remote Desktop
Connection
Allowed
IN All Traffic from internet to our
firewall (Virtual Appliance -
NGFW)
Allowed
OUT* 1688 VM Licence check Allowed
OUT All Traffic from VNET to
internet
Denied
IN** 168.63.129.16 Unique IP used by Azure
for DHCP, DNS, Azure Load
Balance
Allow

23. VNET | Subnet | UDR | IP FW | NGS | Site-to-Site VPN | Point-to-Site VPN | Express Route

24. Questions
Answers

25. {
“name” : “Radu Vunvulea,
“blog” : “vunvulearadu.blogspot.com”,
“email” : ”vunvulear@outlook.com”,
“socialMedia” :
{
“twitter” : “@RaduVunvulea”,
“fb” : “radu.vunvulea”
}
}

26. https://github.com/Microsoft/azure-
docs/blob/master/articles/best-practices-network-
security.md

27. {
“name” : “Radu Vunvulea,
“blog” : “vunvulearadu.blogspot.com”,
“email” : ”vunvulear@outlook.com”,
“socialMedia” :
{
“twitter” : “@RaduVunvulea”,
“fb” : “radu.vunvulea”
}
}