Keep Bastion's target selector aligned with the required sign-in method
Switching a native-client connection from VM resource ID to private IP changes the supported authentication and connection options.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 67 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Check Azure Firewall network matches before tightening an application rule
A matching network rule terminates rule processing before an application rule is evaluated, regardless of numeric priorities across rule types.
Read the guide
Distinguish a Policy reevaluation from a fresh guest configuration audit
An on-demand Azure Policy evaluation reads the latest Machine Configuration result; it does not initiate another check inside the machine.
Read the guide
Remove query shapes that prevent Resource Graph continuation
A missing continuation token can reflect a query's operators or output types, not a complete inventory.
Read the guide
Track a Network Watcher capture file beyond the capture resource
The capture session, its resource and its stored file have different completion and deletion behavior.
Read the guide
Coordinate both owners before removing a preview perimeter link
Either participating network security perimeter can initiate removal without the other administrator's consent.
Read the guide
Reduce Azure role-assignment counts without preserving excessive scope
A broader duplicate assignment is not automatically the one to keep when a subscription reaches its assignment limit.
Read the guide
Preserve Route Server BGP communication when inserting a firewall route
An inspection route can unintentionally divert the control-plane traffic needed by the gateway or peered appliance.
Read the guide
Account for zonal upgrade sequencing in Service Fabric timeouts
Hierarchical and Parallel zonal modes group upgrade domains differently; faster cross-zone progression is not equivalent to zone-by-zone rollout.
Read the guide
Allow for Resource Health transitions that never enter the Activity Log
Resource Health's documented logging exclusions prevent the Activity Log from being a complete record of every observed state change.
Read the guide