How to enable Ping (ICMP echo) on an Azure VM
This is just a very quick blog post because I got the question from a couple of people. In this blog post want to show you how you can enable ping (ICMP) on a public IP address of an Azure virtual machine (VM). First, just let me say that assigning a public IP address to a virtual machine can be a security risk. So if you do that, make sure you know what you are doing. If you need admin access to virtual machines only for a specific time, there are services like Azure Just-in-Time VM Access (JIT) and Azure Bastion you should have a look at. Now back to the topic, Azure by default denies and blocks all public inbound traffic to an Azure virtual machine, and also includes ICMP traffic. This is a good thing since it improves security by reducing the attack surface. Read more here: https://www.thomasmaurer.ch/2019/09/how-to-enable-ping-icmp-echo-on-an-azure-vm/Azure Speed Test - find the nearest Microsoft Azure Data Center
Hi All, me... new member here from Thailand. Not sure is that anyone share this tip? Before we setup Azure backup, Azure VM, etc. As our site are located around the world. I will run Azure speed test. To find a nearest Microsoft Azure Data Center base on our Server/Site location. This way we will make sure to put Azure Services to the right Microsoft Azure Data Center. To avoid latency and slowness to what we need on Azure. simply go to http://azurespeedtest.azurewebsites.net/ from your site or server that need Azure services. It will show you the nearest Microsoft Azure Data Center. *in photo shown Singapore is the nearest Microsoft Azure Data Center, from Thailand. hope this useful. Cheers, SK
Map Azure Storage as Network Drive
Helping a client migrate completely off on-prem to Azure. Need to map Azure storage directory as a network drive due to SQL and MS Access coding points to a mapped drive on-prem. Few of the employees use Comcast at home, and port 445 is blocked so unable to map. Setup Azure Point to Site VPN, installed on employee's home computer, no issue connecting on VPN client, but still getting "network path not found" when attempting to map the drive. Anyone run into this type of issue and how did you fix / bypass? All end points are Windows 10. Thanks in advance.Create a Site-to-Site VPN between existing Azure and AWS resources
In this article I am going to walk you through setting up a site-to-site VPN between Azure and AWS. Provisionally this has always been a pain as AWS never supported IKEv2. In February of 2019 AWS changed this. Before you had to use a 3rd party network virtual appliance (NVA) either on Azure or AWS to establish the VPN. Information At the time of writing this article BGP is not supported Lets get to it I am going to assume you already have an Azure VPN created and also an AWS VPN created. In AWS navigate to the VPC you want to connect to Azure and create a new Customer Gateways. Enter a Name and the Public IP Address of you Azure Virtual Network Gateway. Then click Create Customer Gateway. To read the full article have a look at my blog. https://pixelrobots.co.uk/2019/03/create-a-site-to-site-vpn-between-existing-azure-and-aws-resources/
Port Mapping on new Azure Portal
We needed to access to one of our VM via RDP protocol from a customer location where RDP ports are restricted on Firewall. I searched internet for a way to map default 3389 RDP port to 443 so I can access the VM. Everything is showing the way on the Classical Portal where there was a functionality called End Points. Endpoints were allowing you to map internal and external ports differently. Other resources shows that doing it with Network Security Groups (NSG) not possible. So, if you're new in Azure and started to use Azure Portal only way to map ports is to use a Load Balancer. 1. Add a new Load Balancer. And then add a new inbound NAT rule 2. Configure the nat to ponit to the VM you wish to connect. And give the port 443 as Port number. Thats it!
Is Azure network supports VPN PPTP, L2TP, IKE2?
Hello I have installed VM in Azure and installed RRAS role with VPN, NAT feature. For test purpose I have opened all ports on NSG and on server. From remote client/Win10 I tried to use differents VPN profile to connect but failed with all PPTP, L2TP, IKE2. //Alexander
Application Gateway config issue with WAF_V2 " CORS header ‘Access-Control-Allow-Origin’ missing".
We have configured Application gateway with WAF_V2 Tier. We are getting CORS issue ‘Access-Control-Allow-Origin’ missing while accessing the Application. Also we have enabled CORS Rule in azure portal Web API, but that doesn’t help us. Its taking more time to configure the rules and if we stop/start the application gateway its not getting start. Due to this issue every time we are recreating the application gateway because of Health Probe status showing as unhealthy. The above all issue after deployed new WAF_V2 tier. Previously we have configured SKU WAF Tier everything its working properly. Also please find the attached "CORS-Issue.png" for your review. Error: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.testdomain.com/api/v1/mobileplatforms. (Reason: CORS request did not succeed).[Learn More] Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.testdomain.com/api/v1/mobileplatforms. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Possibly unhandled rejection: {"data":null,"status":-1,"config":{"method":"GET","transformRequest":[null],"transformResponse":[null],"jsonpCallbackParam":"callback","headers":{"Authorization":"545454CF-74C6-4273-8E05-DB8F53662070:FKmHuWeC4D3pRL/+M44TvkFTqsIKS0/uOX0IVtGlIpM=","nna-date":"Mon, 08 Oct 2018 09:38:29 GMT","Accept":"application/json, text/plain, */*"},"url":"https://api.testdomain.com/api/v1/mobileplatforms","cached":false},"statusText":"","xhrStatus":"error"}.
Access Internet through Azure Point to site VPN
I have point to site VPN to Azure working with RADIUS auth and can access resources in the vNet. I would like to be able to route traffic out to the internet over that VPN connection. Can this be done? If not, how would I replicate this with Azure services without deploying something like a Cisco virtual device? thanks
