Internal API : Virtual Network support for Power Platform
Hello Everyone, We are using Custom Connectors from Power Automate Flows to initiate a call to the Internal API that is hosted in Azure through the MuleSoft Data Gateway. Since we are unable to activate the private endpoint for this internal API, we are seeking guidance on how to securely connect to the API via V-Net integration. Please advise. As per the Microsoft Documentation : Use custom connectors (preview) to securely connect to your services that are protected by private endpoints in Azure or services that are hosted within your private network. https://learn.microsoft.com/en-us/power-platform/admin/vnet-support-overview Thanks, -Sri
Issue with Azure VM Conditional Access for Office 365 and Dynamic Public IP Detection
Hi all, I have a VM in Azure where I need to allow an account with MFA to bypass the requirement on this specific server when using Office 365. I've tried to achieve this using Conditional Access by excluding locations, specifically the IP range of my Azure environment. Although I’ve disconnected any public IPs from this server, the Conditional Access policy still isn’t working as intended. The issue seems to be that it continues to detect a public IP, which changes frequently, making it impossible to exclude. What am I doing wrong?
WordPress App how to restrict access to specific pages on the site
Hello all, I have a WordPress App hosted on Azure and I am struggling with how I can secure specific pages from public access. For example: www.mysite.com/wp-admin www.mysite.com/info.php I'd like it so that only specific IP addresses or Microsoft user accounts can access some, such as admin pages and for some pages I'd like no access at all, to where it just blocks any sort of visit. I've viewed the documentation for Front Door and some networking restrictions but that seems to be just IP addresses and I'm confused about how I can set those rule for specific pages within the App. I know WordPress offer plugins which have this sort of functionality but I'd like to take advantage of Azure's security features rather than plugins from WordPress. Any help is very appreciated. Thank you
Change subnet
we have the usual vnet setup with a/24 subnet split into /25 for vms and /27 for DMZ and /27 for Bastion. the users were running out of IP addresses for VM deployment. I have setup a vnet with a /24 subnet which can give them more IPs but, they want the bastion to be enabled for accessing the VMs. I made sure the VMs are turned off and tried changing the subnet /25 but it says it is in use,. Does Azure allow changing the subnet? I know I can add a whole new subnet for bastion but, I'm thinking about the possibility of changing the same subnet for keeping it organized.Can only remote into azure vm from DC
Hi all, I have set up a site to site connection from on prem to azure and I can remote in via the main dc on prem but not any other server or ping from any other server to the azure. Why can I only remote into the azure VM from the server that has Routing and remote access? Any ideas on how I can fix this?How can I convert an website on Microsoft to IOS?
Hello everyone, Hope you all are doing good, I am Jeck. I have a website which I design and developed on my apple machine and basically made on IOS. Now, I want to change my website to Microsoft, my website is on Best Electric Smokers 2021 Can you guide me porperly or suggest me anyone who can work for me and extend my bussiness on Micosoft. Thank you Have a good day!
one Traffic manager and multiple DNS mapping (pls need clarification on how security is ensured)
Hi Team, I feel really strange on how Azure Traffic Manager allowing traffic from multiple Custom domains with just adding a CNAME record of traffic manager to them without enforcing any validation of DNS from Azure end. May be I am wrong, but let me explain in detail: Here's my setup: Traffic Manager \_____ App Gateway(East) & App Gateway(West) \_WebApp (East) & \_WebApp(West) A HA setup with applications in East & West. I've bought Domain from GoDaddy & I added CNAME record pointing to Traffic manager (pqr-tm.trafficmanager.net). I did no additional steps for Domain validation from Azure. After the DNS propogation happend, the other day when I tired my Custom Domain (lets say pqr.com), it routed to my WebApp as expected as per CNAME record. Now, when I typed www.prq.com in https://digwebinterface.com I could see, it resolved first to "traffic manager" (it clearly displaying my traffic manager name), then to Application Gateway DNS and then to Application Gateway Public IP. Then my friend said, I'll do a trick, I'll get into your site without my notice. Here's what he did: he has Domain in Yahoo. lets say - xyz.com he opened his Yahoo account, went to DNS settings, and in Forward URL option, he kept my traffic manager DNS name which is clearly appearing in https://digwebinterface.com by just typing my website www.prq.com in it. To my surprise, with in a minute, when he type xyz.com in browser, my WebApp started rending page. So, I thought where is security? Here's my point: https://digwebinterface.com -- is publicly available by typing the site name, any one can get Traffic manager URL (if the setup includes it) then, just by keeping CNAME in their forward URL, if they are able to map my site....where is the security? or Am I missed any step in Traffic manager which binds My Domain to it and If any others tries to point their domain to my traffic manager, it rejects? Pls help!! I've a strong feeling that, there will be tightening point, which I am not aware of. Pls guide Guru's :) Thanks, Kiran
Traffic Manager vs Load Balancer for RDP sessions
Hello Azure Team, My challenge: - i want to provide access to Virtual Desktops (VDI) deployed in Azure - i have 3 regions: us, emea, apac - in each region i have 3 shifts (10h each, with 2h overlap), so each region provides 24/7 support - i need to reinitialize each VDI every 24h (redeploy new Windows Terminal Server to make sure no customer data is there for more then 24h) What would be the right design ? I was thinking to use Traffic Manager (DNS loadbalancing) nested profiles: - global profile - nested emea profile - nested us profile - nested apac profile Then another layer of nested profile inside each region (3 shifts per region). But the challenge is in overlaps. I need to make sure my shift2 from emea starting 2 hours before shift1 in emea is finished can work correctly. If i will switchover on the beginning of overlap my shift1 will get a new DNS A responses and their RDP session could be redirected to a new VDI (they would lost all data). I was thinking to increase DNS TTL timer to 2 hours - but that looks like a can of worms (i would not have failover if specific VDI is going down). Another option is not to do DNS loadbalancing but application Load Balancing (using LoadBalancer). But i do face similar challenges - how to plan overlapping shifts (each region is having all 3 shifts). I would like to use Load Balancing with sticky option - this way existing RDP sessions would be redirected to the same VDI, at the beginning of the overlap i would change the weight of the VDI for all new sessions to be redirected to a new VDI, while old sessions would stick with old VDI. Would that work ? Any recommendations ? Thanks, Michal
