Azure Archives - jtpedersen.com IT made simple

Adding a new Address Space to a Azure vNet and peering not updated

March 11, 2022March 11, 2022jantorep

So last week i had to add a new address space to a vNet as i needed a seperate subnet for Private Endpoints. I added a address space, configured the subnet and setup the private endpoints.

When i started testing i could not reach the private endpoints. I could see the traffic flow in the NSG logs and from other vNets trough the Azure Firewall. And i could not figure it out. I asked a few MVP friends and the answer was that this is a limitation in Azure.

Azure Firewall Routing to a Public IP Range in your On-Premises environment

February 5, 2022February 17, 2022jantorep

This week we have been deploying a new environment in Azure for a client. With a secured vWAN Hub with Azure Firewall. The vWAN Hub is connected to a Cisco SD-WAN appliance that connects all of the clients physical location. We configured 2 new Domain Controllers, opened up the traffic between the Azure DC and on-premises DC. We could reach the Azure DC’s but not the other way arround.

Configuring Azure Update Management for Virtual Machine Manager

August 29, 2019August 29, 2019jantorep

With VMM 2019 we got the possibility to setup Azure Update Management for all new VM’s being deployed with VM Templates in VMM.

I see a great value in this as you do not need to setup a local WSUS server to do patching. And for any hoster you can easy have 1 single pane of glass in Azure to monitor and update the VM’s in your environment.

Azure Monitor with System Center Data Protection Manager 2019, and what’s new

March 10, 2019March 10, 2019jantorep

A few day’s ago the System Center team posted a blog on the Windows Server blog post about the upcoming 2019 release this month.

For the 2019 release there was not alot of new features but i wanted to highlight one, the new Azure Monitor overview page. It’s an integration between the DPM server wich is connected to Azure Backup and Azure Log Analytics.

Configure Azure Site Recovery with Virtual Machine Manager Part 2 Test Failover

January 30, 2019January 30, 2019jantorep

In the first Part of this 2 part i showed you how to configure and enable the replication to Azure Site Recovery Vault

In this part i will show you how to run a failover test on the virtual machine you replicated over.

Configure Azure Site Recovery with Virtual Machine Manager

January 30, 2019January 30, 2019jantorep

One of the neat things you can do with Virtual Machine Manager is configure it to replicate Virtual Machines to a Azure Recovery Services Vault. And you can use Azure Site Recovery to fail those Virtual Machines over to Azure if you need to.

Creating a Custom Enterprise Application with Azure SSO

December 27, 2017jantorep

Let’s say your organization want’s to setup a solution against a 3rd party web solution that is hosted in the cloud like a accounting system. And your organization has a rule about this should be Single Sing-On and use your domain login credentials. You already have Azure AD Connector setup with password sync and have all the users synced to Azure AD. And then you realize that the Provider does not have a finished application with a guide in the Enterprise Application store. So what to do then?

How to move your On-Premise WordPress site to a Azure webapp

September 6, 2017November 10, 2017jantorep

So as i am starting a new job in less then 2 months, i thought it was time to move this site from a Virtual Machine running on my current employers S2D cluster to Azure. So i decided to share my way there. So i started googling on how to do this. There where some guides here and there. Some older ones and one from docs.microsoft.com, this one did not move everything. So i started with one, got a timeout error. Tried another did not work.

Azure Enterprise Applications SSO with custom domains

August 1, 2017November 10, 2017jantorep

Hello All

This will be a short but happy blog post 🙂

In the spring we wanted to setup SSO with our support portal freshdesk. This did not work as we where using a custom url, and the Azure SSO was expecting oursite.freshdesk.com as the reply back adress and not our custom url. This was a limitation in the Azure SSO setup.

Setup VPN to use MFA with NPS Extension

February 13, 2017November 10, 2017jantorep

In this blog post i will show you how to setup a Microsoft VPN connection with the new NPS Extension for Azure AD MFA.

This is new service that the Microsoft NPS team just released, that adds an Extension to the Windows Network Policy Server.

When using the NPS extension for Azure MFA, the authentication flow includes the following components:

This is copied from https://docs.microsoft.com/nb-no/azure/multi-factor-authentication/multi-factor-authentication-nps-extension

NAS/VPN Server receives requests from VPN clients and converts them into RADIUS requests to NPS servers.
NPS Server connects to Active Directory to perform the primary authentication for the RADIUS requests and, upon success, passes the request to any installed extensions.
NPS Extension triggers a request to Azure MFA for the secondary authentication. Once the extension receives the response, and if the MFA challenge succeeds, it completes the authentication request by providing the NPS server with security tokens that include an MFA claim, issued by Azure STS.
Azure MFA communicates with Azure Active Directory to retrieve the user’s details and performs the secondary authentication using a verification method configured to the user.

The following diagram illustrates this high-level authentication request flow: