Summary

In this chapter, you learned how the Azure DDoS protection service can be implemented to mitigate DDoS threats against applications and resources deployed in our virtual networks.

You also learned how Azure Firewall can be used to inspect incoming and outgoing virtual network connections to protect against malicious traffic before it impacts our application workloads. We also covered how Azure Firewall Manager can reduce the complexity of deploying policies to multiple firewalls from a centralized management service.

And finally, we covered how WAF (in Application Gateway or Azure Front Door) can be implemented to secure web applications against common exploits, such as SQL injection and cross-site scripting.

The information in this chapter has equipped you with the skills required to secure the perimeter of your Azure virtual networks from attacks and unauthorized access. In the next chapter, we will take this further by looking at network security for our virtual...