Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to protect my Azure web role from other people?

Tags:

firewall

azure

I have a Web role on Azure. I would like to allow only my people to access the web role. I have found post to manual/code to restrict IPs to access the role. I would like to create firewall way(something like SQL Azure's firewall) to block/allow IPs.

I could not find any setting in Azure console. please help.

like image 374
Pongsathon.keng Avatar asked Feb 26 '13 14:02

Pongsathon.keng


People also ask

What is the basic way of protecting an Azure virtual network subnet?

By default, there are no network access controls between the subnets that you create on an Azure virtual network. Detail: Use a network security group to protect against unsolicited traffic into Azure subnets.

Which two types of resources can be protected by using Azure firewall?

Azure Firewall provides inbound protection for non-HTTP/S protocols (for example, RDP, SSH, FTP), outbound network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.

Does Azure firewall encrypt traffic?

Azure Firewall decrypts outbound traffic, performs required security checks, and then encrypts the traffic to the destination. It works in conjunction with URL filtering and web categories by letting administrators allow or deny user access to website categories such as gambling or social media.

What does Azure firewall protect?

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources.


1 Answers

If you publish your endpoint on the Internet through the Windows Azure load balancer, there is no option in place to define firewall rules on Azure.

But you can secure access to VMs created using either Windows Azure’s Infrastructure as a Service (IaaS) technology or its Platform as a Service (PaaS) technology through the Windows Azure Virtual Network service.

Windows Azure Virtual Network lets you create a logical boundary around a group of VMs, called a virtual network or VNET, in a Windows Azure datacenter. It then lets you establish an IPsec connection between this VNET and your local network.

For more information see Networking, Windows Azure Networking, Windows Azure Virtual Network, Create a Virtual Network for Cross-Premises Connectivity, Create a Virtual Network in Windows Azure.

About the cost of this service: Windows Azure Virtual Network is currently (February 2013) available in preview at no charge. Once the service becomes generally available you will be charged if you create a hardware VPN connection between a Virtual Network (VNET) and your VPN gateway. The charge will be for each hour that the VPN connection is provisioned and available (called the “VPN connection hour”). All data transferred over the VPN connection is charged at Window Azure’s standard data transfer rates. You can use the pricing calculator for a simulation.

like image 184
Fernando Correia Avatar answered Oct 30 '22 19:10

Fernando Correia