Use the documented parent-and-child sizes for Azure custom IPv6 prefixes
Keep global allocation, regional allocation and usable public prefixes distinct.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 36 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Separate extension installation counts from enabled-device counts in Defender
How should Defender browser-extension counts be interpreted when validating an extension cleanup?
Read the guide
Plan manual remediation before enabling Enterprise App Catalog auto-update
What recovery work remains with administrators when an Enterprise App Catalog auto-update version must be removed?
Read the guide
Document both TLS legs through Application Gateway
Identify where TLS terminates and where the backend connection begins.
Read the guide
Check Azure Monitor workspace access mode when resource-scoped metrics queries fail
Resource permissions and workspace permissions are separate inputs to a metrics-access decision.
Read the guide
Place an ACR private endpoint outside the subnet delegated to Azure Container Instances
Review subnet ownership before diagnosing an ACI image-pull deployment failure.
Read the guide
Complete the rule and circuit association when creating an ExpressRoute route filter
A route-filter resource alone does not express the intended service-prefix selection.
Read the guide
Verify the actual frontend-port mapping for each inbound NAT target
Match a Load Balancer endpoint to the intended VM before using it for administration.
Read the guide
Check required headers before debugging a custom Azure Storage REST request
DSE recommends capturing a sanitized request description that includes the method, target account, operation, API version, and request time before investigating an authorization failure.
Read the guide
Limit Queue ABAC designs to supported data actions
DSE recommends listing each requested operation before writing the condition.
Read the guide