{"id":21350,"date":"2018-09-26T20:30:56","date_gmt":"2018-09-26T19:30:56","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=21350"},"modified":"2018-09-26T20:32:22","modified_gmt":"2018-09-26T19:32:22","slug":"planning-network-security-for-your-mission-critical-workloads-with-virtual-networks","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=21350","title":{"rendered":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks"},"content":{"rendered":"<p>Speakers: Anitha Adusumilli and Mario Lopez<\/p>\n<h2><\/h2>\n<h2><\/h2>\n<p>Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing.<\/p>\n<h2>Understanding Cloud Challenges<\/h2>\n<ul>\n<li>Dynamic, scalable workloads \u2013 no fixed network perimeter<\/li>\n<li>Attack vectors based on application access patterns<\/li>\n<li>Risk of data exposure to exploits, with a mix of IaaS, PaaS, and SaaS services<\/li>\n<\/ul>\n<p>Cloud network security is evolving as the apps change!<\/p>\n<h2>Planning Network Security in Azure<\/h2>\n<ul>\n<li>Similar controls as on-premises.<\/li>\n<li>Pick your network security offerings<\/li>\n<li>Layer and scale<\/li>\n<li>More flexible than on-premises \u2013 faster to deploy\/tear down<\/li>\n<li>Azure offers managed services<\/li>\n<\/ul>\n<p>You can build a vNet and add subnets as security boundaries. You can add peered vNets locally and in other regions.&nbsp; And you might have external connections via VPN\/ExpressRoute.<\/p>\n<p>There are a mixture of Azure-native and third-party security offerings.<\/p>\n<h2>Application access Patterns<\/h2>\n<p>Use these to decide what network security solution to pick. Probably will be a mixture of the below.<\/p>\n<ul>\n<li>Service endpoints<\/li>\n<li>NSGs<\/li>\n<li>ASGs<\/li>\n<li>User-defined routes<\/li>\n<li>DDoS Protection<\/li>\n<li>WAF<\/li>\n<li>Azure Firewall<\/li>\n<li>NVAs<\/li>\n<\/ul>\n<h2>Security with Azure Services<\/h2>\n<p>VMs don\u2019t need public IPs. However, when you use Azure services, they have public IPs, e.g. Azure SQL. This might require you to allow outbound connections that you might not have done before. Anyone with rights for default deployments can access from anywhere. But if you add services to the VNet, via service endpoints, and apply services firewalls, e.g. Azure SQL, then you can restrict access to these platform services.<\/p>\n<p>Two patterns:<\/p>\n<ul>\n<li>Add services to a VNet where the VNet is all that can access the service<\/li>\n<li>Add services to a VNet to allow private access, but public access is also possible.<\/li>\n<\/ul>\n<h2>Pattern 1: Deploy services into VNet<\/h2>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_29_30_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_14_29_30_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_14_29_30_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_29_30_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p>Example, App Services Environment (ASE) is deployed into a subnet.<\/p>\n<p>Security:<\/p>\n<ul>\n<li>NSGs<\/li>\n<li>NVAs<\/li>\n<li>User-defined routing can control direction of traffic, e.g.a private deployment can only route via a gateway (forced tunnelling) <\/li>\n<li>Services in Azure might require outbound access from your VNet. Use Service Tags to limit outbound traffic to local service.<\/li>\n<\/ul>\n<p>New service tags:<\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_35_13_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_14_35_13_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_14_35_13_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_35_13_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p>Azure Webapps will be getting preview support soon \u2013 an alternative to P2S VPN.<\/p>\n<h2>Pattern 2: Service Endpoints<\/h2>\n<ul>\n<li>Extend VNet identity to the service<\/li>\n<li>Secure your critical Azure resources to only your VNet<\/li>\n<li>Traffic remains on the Microsoft backbone<\/li>\n<\/ul>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_38_42_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_14_38_42_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_14_38_42_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_38_42_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<h2>How to Secure Your Resources Using Service Endpoints<\/h2>\n<p>Normal flow in new setup:<\/p>\n<ol>\n<li>Set endpoint on your endpoint<\/li>\n<li>Lock your service resource to your subnet<\/li>\n<\/ol>\n<p>One-Time Migration:<\/p>\n<ol>\n<li>Step 1: Add VNet rule without endpoint<\/li>\n<li>Set endpoint on subnet<\/li>\n<li>Remove the public IP setting<\/li>\n<\/ol>\n<p>All scenarios: Remove \u201cAllow All Azure Services\u201d or \u201cAllow All\u201d settings.<\/p>\n<h2>Service Endpoint: Scaling Security<\/h2>\n<ul>\n<li>Resource locked to a VNet: No access to other VNets or Internet or on-premises.<\/li>\n<li>Permit more VNets: Turn on service endpoints on VNets and add under \u201cvirtual Networks\u201d on resource<\/li>\n<li>Permit on-premises: Add the on-prem NAT IPs under \u201cfirewall\u201d on resource.<\/li>\n<\/ul>\n<p>Careful \u2013 locking network access down can prevent Azure services, such as backup. There are docs for these workarounds \u2013 ask Anitha Adusumilli.<\/p>\n<h2>Stitching Services Together<\/h2>\n<ul>\n<li>Secure Azure resources to managed service subnets with endpoints<\/li>\n<li>More<\/li>\n<\/ul>\n<h2>Securing VNet traffic: Services Tags in NSGs<\/h2>\n<ul>\n<li>Restrict network access to just the azure services your use.<\/li>\n<li>Maintenance of IP addresses for each tag provided by Azure (Service Tags)<\/li>\n<li>Support for global and regional tags (varies by service)<\/li>\n<\/ul>\n<h2>Service endpoints: Data-Exfiltration Risk<\/h2>\n<ul>\n<li>NSG service tags not enough to prevent data exfiltration from VNet<\/li>\n<li>Access to unauthorized accounts possible<\/li>\n<\/ul>\n<p>Option 1: filtering with Azure Firewall or NVAs<\/p>\n<ul>\n<li>Service endpoints bypass NVAs for service traffic, if set on originating subnet<\/li>\n<li>Optionally, continue using NVAs for auditing\/filtering service traffic<\/li>\n<li>More<\/li>\n<\/ul>\n<h2>Service Endpoint Policies<\/h2>\n<ul>\n<li>Prevent unauthorized access to storage accounts<\/li>\n<li>Restrict vnet access to specific azure storage accounts<\/li>\n<li>Granular access control over service endpoints<\/li>\n<li>West Central US and West US2 today<\/li>\n<\/ul>\n<h2>Demo: Service Endpoint Policies<\/h2>\n<p>She has a VNet with a subnet. Service endpoints is turned on for Storage (all) in the subnet. She only wants to allow access to a single storage account. Adds that storage account to the subnet\u2019s service endpoint. Logs into VM in the subnet and runs Storage Explorer. Can access files in the configured storage account. Another storage account can also be accessed. Goes to Service Endpoint Policies \u2013 a top level resource like NSGs. Adds a new policy, adds it to resource group and names it. Sets a scope \u2013 all storage accounts, all accounts in resource group, or specific storage account \u2013 picks the allowed storage account. Associates the policy with the subnet \u2013 like NSG. Now in the VM, only the authorized storage account can be accessed in Storage Explorer.<\/p>\n<p>Switch to Mario for part 2.<\/p>\n<h2>Securing Access From Internet<\/h2>\n<ul>\n<li>DDoS attacks<\/li>\n<li>Web Application Vulnerabilities<\/li>\n<\/ul>\n<h2>New in DDoS Standard<\/h2>\n<ul>\n<li>Attack analysis<\/li>\n<li>Rapid Response \u2013 Specialized rapid response team support during active attacks (via support ticket). Custom mitigation policy configuration.<\/li>\n<li>Azure Security Center Integration \u2013 intelligent DDoS protection virtual network recommendation<\/li>\n<\/ul>\n<h2>New in WAF<\/h2>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_07_06_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_07_06_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_07_06_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_07_06_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_08_26_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_08_26_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_08_26_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_08_26_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<h2><\/h2>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_08_26_Pro-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_08_26_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_08_26_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_08_26_Pro_thumb-1.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_15_40_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_15_40_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_15_40_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_15_40_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_17_22_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_17_22_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_17_22_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_17_22_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_19_01_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_19_01_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_19_01_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_19_01_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p>They\u2019re flattening the number of subnets using ASGs \u2013 tiers of app in one subnet but rules based on on ASGs instead of subnets. Subnets then deployed for Edge\/DMZ and app. Using ASGs for micro-segmentation. <\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_21_36_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_21_36_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_21_36_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_21_36_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_23_09_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_23_09_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_23_09_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_23_09_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><\/p>\n<h2>Putting it All Together<\/h2>\n<p><a href=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_29_01_Pro.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"338\" title=\"WIN_20180926_15_29_01_Pro\" style=\"border: 0px currentcolor; border-image: none; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" alt=\"WIN_20180926_15_29_01_Pro\" src=\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_15_29_01_Pro_thumb.jpg\" border=\"0\"><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS, &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=21350\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Planning Network Security For Your Mission-Critical Workloads With Virtual Networks&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[14],"tags":[170,176,203,190,289],"class_list":["post-21350","post","type-post","status-publish","format-standard","hentry","category-eventnotes","tag-azure","tag-eventnotes","tag-ignite","tag-security","tag-virtual-network"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"AFinn\"\/>\n\t<meta name=\"google-site-verification\" content=\"TDKjbi2McB2eLIfL6KwPB3aQqv5E-mbcb2QYIcovGaI\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/aidanfinn.com\/?p=21350\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Aidan Finn, IT Pro - A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro\" \/>\n\t\t<meta property=\"og:description\" content=\"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/aidanfinn.com\/?p=21350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2018-09-26T19:30:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2018-09-26T19:32:22+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@joe_elway\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@joe_elway\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#article\",\"name\":\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro\",\"headline\":\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks\",\"author\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/WIN_20180926_14_29_30_Pro_thumb.jpg\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350\\\/#articleImage\",\"width\":600,\"height\":338},\"datePublished\":\"2018-09-26T20:30:56+01:00\",\"dateModified\":\"2018-09-26T20:32:22+01:00\",\"inLanguage\":\"en-GB\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#webpage\"},\"articleSection\":\"Event Notes, Azure, Event Notes, Ignite, Security, Virtual Network\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/aidanfinn.com\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=14#listItem\",\"name\":\"Event Notes\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=14#listItem\",\"position\":2,\"name\":\"Event Notes\",\"item\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=14\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#listItem\",\"name\":\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#listItem\",\"position\":3,\"name\":\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?cat=14#listItem\",\"name\":\"Event Notes\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\",\"name\":\"AFinn\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"AFinn\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1\",\"name\":\"AFinn\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"AFinn\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#webpage\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350\",\"name\":\"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro\",\"description\":\"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \\u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?p=21350#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/?author=1#author\"},\"datePublished\":\"2018-09-26T20:30:56+01:00\",\"dateModified\":\"2018-09-26T20:32:22+01:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#website\",\"url\":\"https:\\\/\\\/aidanfinn.com\\\/\",\"name\":\"Aidan Finn, IT Pro\",\"description\":\"A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/aidanfinn.com\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro","description":"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,","canonical_url":"https:\/\/aidanfinn.com\/?p=21350","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"TDKjbi2McB2eLIfL6KwPB3aQqv5E-mbcb2QYIcovGaI","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aidanfinn.com\/?p=21350#article","name":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro","headline":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks","author":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"publisher":{"@id":"https:\/\/aidanfinn.com\/#person"},"image":{"@type":"ImageObject","url":"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180926_14_29_30_Pro_thumb.jpg","@id":"https:\/\/aidanfinn.com\/?p=21350\/#articleImage","width":600,"height":338},"datePublished":"2018-09-26T20:30:56+01:00","dateModified":"2018-09-26T20:32:22+01:00","inLanguage":"en-GB","mainEntityOfPage":{"@id":"https:\/\/aidanfinn.com\/?p=21350#webpage"},"isPartOf":{"@id":"https:\/\/aidanfinn.com\/?p=21350#webpage"},"articleSection":"Event Notes, Azure, Event Notes, Ignite, Security, Virtual Network"},{"@type":"BreadcrumbList","@id":"https:\/\/aidanfinn.com\/?p=21350#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/aidanfinn.com#listItem","position":1,"name":"Home","item":"https:\/\/aidanfinn.com","nextItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=14#listItem","name":"Event Notes"}},{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=14#listItem","position":2,"name":"Event Notes","item":"https:\/\/aidanfinn.com\/?cat=14","nextItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?p=21350#listItem","name":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks"},"previousItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?p=21350#listItem","position":3,"name":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks","previousItem":{"@type":"ListItem","@id":"https:\/\/aidanfinn.com\/?cat=14#listItem","name":"Event Notes"}}]},{"@type":"Person","@id":"https:\/\/aidanfinn.com\/#person","name":"AFinn","image":{"@type":"ImageObject","@id":"https:\/\/aidanfinn.com\/?p=21350#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g","width":96,"height":96,"caption":"AFinn"}},{"@type":"Person","@id":"https:\/\/aidanfinn.com\/?author=1#author","url":"https:\/\/aidanfinn.com\/?author=1","name":"AFinn","image":{"@type":"ImageObject","@id":"https:\/\/aidanfinn.com\/?p=21350#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/65fde4aa9f2ab1cf1514ae320a37ec682d9398ce5791d3c2dd1e8670a71ceea0?s=96&d=mm&r=g","width":96,"height":96,"caption":"AFinn"}},{"@type":"WebPage","@id":"https:\/\/aidanfinn.com\/?p=21350#webpage","url":"https:\/\/aidanfinn.com\/?p=21350","name":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro","description":"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/aidanfinn.com\/#website"},"breadcrumb":{"@id":"https:\/\/aidanfinn.com\/?p=21350#breadcrumblist"},"author":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"creator":{"@id":"https:\/\/aidanfinn.com\/?author=1#author"},"datePublished":"2018-09-26T20:30:56+01:00","dateModified":"2018-09-26T20:32:22+01:00"},{"@type":"WebSite","@id":"https:\/\/aidanfinn.com\/#website","url":"https:\/\/aidanfinn.com\/","name":"Aidan Finn, IT Pro","description":"A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...","inLanguage":"en-GB","publisher":{"@id":"https:\/\/aidanfinn.com\/#person"}}]},"og:locale":"en_GB","og:site_name":"Aidan Finn, IT Pro - A blog covering Azure, Hyper-V, Windows Server, desktop, systems management, deployment, and so on ...","og:type":"article","og:title":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro","og:description":"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,","og:url":"https:\/\/aidanfinn.com\/?p=21350","article:published_time":"2018-09-26T19:30:56+00:00","article:modified_time":"2018-09-26T19:32:22+00:00","twitter:card":"summary","twitter:site":"@joe_elway","twitter:title":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks | Aidan Finn, IT Pro","twitter:description":"Speakers: Anitha Adusumilli and Mario Lopez Networking ensure that data remains in your private space in the cloud. So it\u2019s not just a VM thing. Understanding Cloud Challenges Dynamic, scalable workloads \u2013 no fixed network perimeter Attack vectors based on application access patterns Risk of data exposure to exploits, with a mix of IaaS, PaaS,","twitter:creator":"@joe_elway"},"aioseo_meta_data":{"post_id":"21350","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-21 03:53:23","updated":"2025-06-04 17:24:02","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/aidanfinn.com\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/aidanfinn.com\/?cat=14\" title=\"Event Notes\">Event Notes<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tPlanning Network Security For Your Mission-Critical Workloads With Virtual Networks\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/aidanfinn.com"},{"label":"Event Notes","link":"https:\/\/aidanfinn.com\/?cat=14"},{"label":"Planning Network Security For Your Mission-Critical Workloads With Virtual Networks","link":"https:\/\/aidanfinn.com\/?p=21350"}],"amp_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/21350","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=21350"}],"version-history":[{"count":1,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/21350\/revisions"}],"predecessor-version":[{"id":21351,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/21350\/revisions\/21351"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}