Why The Classic DMZ/Secure Zone Design Is Worthless in Azure

I see many people implementing classic network security designs in Azure. Maybe there’s DMZ and an internal virtual network. Maybe they split Production, Test, and Dev into three virtual networks. Possibly, they do a common government implementation – what Norway calls “Secure Zone”. I’m going to explain to you why…

05/03/2025 Article Bloggers Aidan Finn

Share:

You may be interested in

Azure Image Builder Job Fails With TCP 60000, 5986 or 22 Errors
In this post, I will explain how to solve the situation when an Azure Image Builder job fails with the following errors: [ERROR] connection error: unknown error Post “https://10.1.10.9:5986/wsman”: proxyconnect…
20/09/2024
Azure Virtual Networks Do Not Exist
I see many bad designs where people bring cable-oriented designs from physical locations into Azure. I hear lots of incorrect assumptions when people are discussing network designs. For example: “I…
17/02/2025
Azure Infrastructure Announcements – October 2023
October is the month of ghosts and monsters – Halloween (Samhain as we Celts originally called it). Read on to find out what ghouls and creatures crawled from under the…
01/11/2023
Beware Of The Default Rules In Network Security Groups
The Network Security Group (NSG) is the primary mechanism for segmenting a subnet in Microsoft Azure. NSGs are commonly implemented. Unfortunately, people assume quite a bit about NSGs, and I…
20/02/2025
Referencing Private Endpoint IP Addresses In Terraform
It is possible to dynamically retrieve the resulting IP address of an Azure Private Endpoint and use it in other resources in Terraform. This post will show you how. Scenario…
16/03/2023
Micro-Segmentation Security In Azure Networks
In this post, I want to discuss the importance of designing and implementing micro-segmentation in Azure networks. Repeating The Same Mistakes In 2002-2003, the world was being hammered by malware.…
04/03/2025
Azure Firewall Deep Dive Training
I’ll tell you about my new virtual training course on Azure Firewall and share some schedule information in this post. Background I’ve been talking about Azure Firewall for years. I’ve…
23/11/2024
Cannot Remove Subnet Because of App Service VNet Integration
Here I will describe how you can deal with an issue where you cannot delete a subnet from a VNet after deleting an Azure App Service or Function App with…
13/02/2023
Default Outbound Access For VMs In Azure Will Be Retired
Microsoft has announced that the default route, an implicit public IP address, is being deprecated 30 September 2025. Background Let’s define “Internet” for the purposes of this post. The Internet…
12/10/2023
A Beginners Guide To The MVP Summit (2024)
This is my updated post on providing information on what the MVP Summit is, what to expect, and some useful tips/tricks in the neighborhood. This is a big update on…
27/02/2024
Azure Infrastructure Announcements – July 2023
Many people in Europe take the month of July off for vacation so they would have missed out on an unusually busy few weeks of announcements for Microsoft. This post…
30/08/2023
The Digital Intern – Early Experience with Microsoft Copilot
I will share my early experiences with Microsoft Copilot, the positives and negatives, clear up some false expectations, and explain why I think of Generative AI as a digital intern.…
03/11/2023