Cyber security
Security Hardening
Security vulnerability assessments
Microsoft Enterprise Mobility and Security (EMS) as well as general cybersecurity, privacy and compliance articles.
Security Compliance and Identity (SCI)
Identity and Access Management (IAM)
Introduction to Datacenter Technology This article provides a technical overview of datacenter technologies and systems. Datacenters form the backbone of the digital world, acting as the central hubs where computing resources are concentrated for remote access. These sprawling complexes of servers, networking equipment, and other hardware allow for the seamless delivery and storage of data, ... Read more
Setting the ground for Microsoft 365 configuration best practices It is very common for Microsoft 365 customers to request external consultation on how to properly setup a new Microsoft 365 tenant and subscriptions or re-configure their existing subscription(s) according to Microsoft best practices. This article attempts to put together a Microsoft 365 configuration best practices ... Read more
Introduction The purpose of this article is to present Microsoft 365 external sharing design considerations. When designing your Microsoft 365 tenant, you need to consider a number of factors for allowing or prohibiting access to your Microsoft 365 applications and data to a number of internal and external users. This article discusses the following design ... Read more
Introduction to VPN and Zero Trust clients VPN (Virtual Private Network) and Zero Trust are both approaches to network security, but they differ in their underlying principles and methods of securing network connections. VPN (Virtual Private Network) A VPN is a network technology that creates a secure and encrypted connection over a public network, such ... Read more
Introduction Microsoft has removed Basic authentication and the smtp auth option in Exchange Online services, i.e. Exchange Online for Exchange ActiveSync (EAS), POP, IMAP, Remote PowerShell, Exchange Web Services (EWS), Offline Address Book (OAB), Outlook for Windows, and Mac. The Microsoft Security defaults configuration and modern authentication are the successor technologies and use OAuth 2.0 ... Read more
Introduction Microsoft 365 security score is a consolidated security score based on Microsoft best practice security configurations for Microsoft 365 tenants. The higher the score the higher theoretically your overall Microsoft 365 tenant security levels. The score comprises a list of improvement actions based on your current security posture. Not all improvement actions may be ... Read more
Overview Some of TLS protocols (TLS 1.0 and TLS 1.1) as well as ciphers suites (3DES - TLS_RSA_WITH_3DES_EDE_CBC_SHA) are gradually being deprecated from all software systems (client and server). This undoubtably affects Azure services as well. If there is a mismatch in the TLS configuration among the components of your Azure solution, you may encounter ... Read more
This article provides a high-level analysis of the Exchange Online and SharePoint Online data protection mechanisms. After migrating to Exchange Online and SharePoint Online, you need to consider the available Exchange Online and SharePoint Online data protection mechanisms. All Office365 components are adequately protected from accidental deletion via the usage of various Office365 features. The ... Read more
Internet real-time maps The COVID-19 pandemic has changed the way the world lives, works, and connects. TeleGeography is curating news and providing analysis on the impact this is having on global networks. Telegeography has put up a blog with live information collected from hundreds of network operators, datacenter operators and ISPs around the globe which ... Read more
This post discusses status pages for cloud service providers. The post is also available in my podcast. Introduction to status pages It is a best practice for every cloud service provider (and more generally any company offering cloud services to end-users, such as an independent cloud software vendor) to operate a Web application called status ... Read more
