
Azure firewall, a cloud-native security service, protects north-south and east-west traffic with filtering and real-time threat intelligence, and it covers basic, standard, and premium SKUs with budget alerts.
Deploy Azure Firewall in a hybrid network that links on prem data centers to Azure workloads via a hub and spoke VNet, using VNet peering, gateways, and route rules.
Configure an Azure firewall in a vnet and use a destination network address translation rule to filter inbound traffic, enabling rdp to a private vm.
Set up azure firewall with ddos protection in a two-subnet vnet, configure a firewall policy with application and nat rules, and test rdp and web access.
Learn to integrate Azure Firewall with NAT gateway to provide outbound internet access for private subnets, using VNet hub and spoke, route tables, and firewall policies.
Learn to back up Azure Firewall and firewall policy using Logic Apps, deploying a template to a storage blob, configuring API connections and permissions.
Explore public IP configuration for Azure Firewall and compare NAT gateway scaling to maximize SNAT ports, including how multiple public IPs boost outbound capacity.
Explore how FQDN tags and service tags simplify Azure Firewall policy rules, enabling Windows updates across Azure and on-premises environments while Microsoft manages the tags.
Explore how the Azure application gateway listens for requests, routes to backend pools with routing rules, uses http or https, and leverages a web application firewall.
Learn how ssl termination at the application gateway decrypts https traffic, forwards unencrypted http to backend targets, and improves performance, resource utilization, visibility, and certificate management.
Learn how to enable end-to-end ssl encryption through the application gateway by decrypting requests for routing and re-encrypting them to back-end targets with https settings and backend certificates.
Deploy a brownfield AKS cluster and an existing application gateway, enable the application gateway ingress controller, and establish VNet peering to connect them, overcoming address space overlaps.
Explore application gateway metrics and insights, including latency, capacity units, connections, throughput, backend health, 500 errors, and how to diagnose performance bottlenecks for Azure load balancing.
Explore advanced topics for the application gateway, configuring it to handle high traffic while using cookie affinity and connection draining, and compare pricing models and tiers.
Learn how connection draining helps the application gateway gracefully remove backend pool targets during planned updates without terminating existing connections. Cookie-based affinity allows traffic to de-registered instances to continue.
Implement custom error pages for application gateways to brand 502 and 403 responses, improving user experience; configure listener-based pages and use Azure PowerShell for global options when needed.
enable websocket communication through the application gateway by upgrading from http to tcp after the handshake, leveraging fast, reliable websocket over http or https with backend support.
Explore frontend ip addresses in the application gateway, including public and private options and static or dynamic public ips, internal load balancing, and private-ip subnet requirements.
Explore the core features of Azure Front Door, including creating the front door, configuring a custom domain and security, implementing traffic redirects, managing backend pools, and purging edge caches.
Enable https for a custom domain on Azure Front Door, choose the minimum TALF version, and decide between Front Door managed certificates or your own certificates in key vaults.
Explore the routing architecture of Azure front door, from edge locations and host header matching to TLS handshakes, custom domain handling, web application firewall evaluation, caching, and backend pool selection.
Compare Azure Front Door standard and premium features, including private origin, custom rules, bot protection, and security reports, to choose the right tier for your needs.
Explore front door metrics, including backend health percentage, backend request codes, latency, and billable response sizes, to understand where latency comes from and how requests are handled.
Create alert rules for edge and front door resources using metrics or logs, set threshold for backend health, and route notifications through action groups to monitor traffic and security.
Create a public load balancer, configure a virtual network and two VMs, set up backend pools, health probes, and HTTP rules, and test with IIS.
Engage in a hands-on Azure load balancing and firewall setup, creating and configuring services while monitoring costs, and learn quick cleanup to avoid ongoing monthly bills.
Explore basic load balancer configuration in Azure, including resource group, region, and SKU, while comparing basic and standard tiers and public versus internal options for production workloads.
Create an Azure load balancer with a front end IP, public IP, and backend pool, then define an inbound load balancing rule using TCP or UDP with a health probe.
Explore zone redundancy to serve traffic through a single front end IP across zones. Compare zonal deployment and no-zone options, and learn how traffic manager directs to healthy zones.
Learn how to enable high availability ports on Azure internal load balancers, enabling load balancing across all ports for every flow based on source and destination IPs, ports, and protocol.
Implement outbound-only connectivity using an internal and a public load balancer, with a front-end IP and outbound rule; note NAT gateway is recommended to avoid port exhaustion.
Explore Azure load balancer metrics, including net port status, internet port counts, connection counts, health probe status, and aggregations such as count, sum, average, min, and max.
Configure Azure load balancer alerts by linking them to metrics, setting a static threshold such as 65,000 net connections, evaluating every minute over 30 minutes, and notifying an action group.
Create and configure a traffic manager profile using priority routing to deliver high availability by directing traffic to Sydney first and failing over to US via endpoints.
Engage in this hands-on Azure course to create VMs, App Service, and Traffic Manager, learn load balancing services and firewall concepts, and practice clean up to minimize costs.
Explore weighted routing in Azure traffic manager, distributing traffic across region endpoints by configured weights, with Sydney and US IIS servers as a practical example and notes on DNS caching.
Explore subnet routing in an Azure traffic manager profile by assigning a cidr range to direct traffic. See how traffic from the specified cidr reaches a chosen endpoint.
Explore endpoint monitoring in Azure traffic manager: configure a traffic manager profile with priority routing, define http/https/tcp probes, custom headers, status code ranges, and probing intervals to assess endpoint health.
Enable traffic view in the traffic manager profile to visualize traffic origin and endpoints on a world map, with a table of local DNS resolver IP, region, volume, and latency.
Explore nested traffic manager profiles, including parent and child configurations, nested endpoints, and routing strategies like performance and weighted routing, with health monitoring and IPv4/IPv6 considerations.
Learn how disaster recovery with Azure Traffic Manager enables automatic failover between primary and backup sites using priority routing and health checks.
Configure diagnostic settings for a traffic manager profile by creating a new diagnostic settings entry and directing all logs and metrics to a log analytics workspace, then save changes.
Explore traffic manager metrics, including endpoint status by endpoints and queries by endpoint results, with filters and alerts to monitor and optimize your Azure load balancing setup.
Verify traffic manager settings using Windows tools like nslookup and ipconfig, and test failover, weighted routing, and performance routing for your traffic manager profile.
Explore performance considerations for your traffic manager profile and tools to measure DNS performance of your traffic manager. A link to a helpful document is provided in the description.
Introduction to Azure Load Balancing Services and Firewalls
As businesses move critical applications to the cloud, the ability to deliver high availability, reliability, scalability, and airtight security becomes essential. Microsoft Azure provides a rich set of networking services designed to keep your applications robust and protected, regardless of user location or demand.
Why Load Balancing and Firewalls Matter
Cloud applications must serve users across diverse regions, maintain high performance during spikes in traffic, and defend against both external and internal threats. Load balancing is crucial for evenly distributing user requests and workloads, improving fault tolerance, and preventing service outages. Meanwhile, proper firewall configuration is key to establishing a secure boundary for your infrastructure, managing traffic flows, and mitigating unauthorized access or attacks.
What This Course Covers
In this course, you’ll gain a practical and in-depth understanding of how Azure’s built-in networking solutions provide the backbone for scalable and secure cloud deployments. Key topics include:
Azure Load Balancer: Learn how to distribute traffic efficiently at the network layer to ensure high availability for your virtual machines and containers.
Azure Application Gateway: See how this application delivery controller provides advanced layer 7 (HTTP/HTTPS) routing, SSL termination, and application firewall capabilities for protection against web-based threats.
Azure Traffic Manager: Understand DNS-based load balancing for global user distribution and seamless failover across multiple Azure regions.
Azure Front Door: Discover how this global, scalable entry point delivers high-performance, secure web applications with intelligent traffic routing, SSL offloading, and integrated Web Application Firewall.
Azure Firewall: Explore the centralized, cloud-native network security service that enables you to create and enforce application and network connectivity policies across your resources.
Network Security Groups (NSGs): Grasp how NSGs filter and control traffic at the subnet and NIC levels for fine-grained access management within your virtual networks.
Security Best Practices: Review strategies for designing secure, compliant network architectures, including segmentation, zero trust, and defense-in-depth approaches.
Integration and Monitoring: Discover how to integrate load balancing and firewall services with Azure Monitor, diagnostics, and alerting tools to proactively detect and respond to threats or performance issues.
Who Should Take This Course?
This course is ideal for IT professionals, cloud architects, security engineers, and anyone responsible for designing or managing cloud-based applications in Azure. Whether you are new to cloud networking or looking to deepen your expertise, the course balances essential concepts with actionable, hands-on guidance.
Outcomes and Benefits
By the end of this course, you will know how to:
Evaluate and select the appropriate Azure load balancing solution for specific scenarios.
Architect resilient, highly available, and scalable applications.
Deploy and configure Azure firewalls and security tools to safeguard your resources.
With this knowledge, you will be able to confidently design, deploy, and manage secure, high-performing cloud applications that meet the demanding requirements of modern business.