Layered Network Security in Azure with NSGs and Azure Firewall
TrackCombine subnet-level NSGs with a centralized Azure Firewall in a hub-spoke topology for defense-in-depth network filtering.
Updated Jul 9, 2026Microsoft Azure
Zero Trust
Implement Zero Trust security with identity, devices, applications, networks, and continuous verification checklists.
11 items 0 followers Last item added Jul 6, 2026
Sign in to follow
Get notified when new items are published
Restrict East-West Traffic with Network Segmentation and VLANs
TrackSeparate servers, clients, management interfaces, and IoT/OT devices into VLANs with inter-VLAN firewall rules to contain lateral movement.
Updated Jul 9, 2026Managed switches · All firewall platforms · VMware NSX / Hyper-V networking
Enforce MFA and Block Legacy Authentication with Conditional Access
TrackRequire multi-factor authentication for all users and block legacy protocols (IMAP, POP, SMTP AUTH) that bypass MFA entirely.
Updated Jul 9, 2026Microsoft 365 · Microsoft Entra ID · Microsoft Exchange Online
Deploy Privileged Access Workstations (PAW) for Tier 0 Administration
TrackGive Domain Admins and other Tier 0 operators a dedicated, locked-down workstation that never touches email, browsing, or productivity apps.
Updated Jul 9, 2026Microsoft Windows 10/11 · Microsoft Active Directory · Microsoft Entra ID
Implement the Active Directory Tiered Administration Model (Tier 0/1/2)
TrackSeparate Domain Admin, server admin, and workstation admin credentials into isolated tiers to block lateral movement and privilege escalation.
Updated Jul 9, 2026Microsoft Active Directory · Microsoft Windows Server