Keep Virtual WAN workload routes on the intended IPsec-over-ExpressRoute path
Check route advertisements before claiming the workload uses the encrypted overlay.
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 19 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Use the documented parent-and-child sizes for Azure custom IPv6 prefixes
Keep global allocation, regional allocation and usable public prefixes distinct.
Read the guide
Separate extension installation counts from enabled-device counts in Defender
How should Defender browser-extension counts be interpreted when validating an extension cleanup?
Read the guide
Plan manual remediation before enabling Enterprise App Catalog auto-update
What recovery work remains with administrators when an Enterprise App Catalog auto-update version must be removed?
Read the guide
Document both TLS legs through Application Gateway
Identify where TLS terminates and where the backend connection begins.
Read the guide
Check Azure Monitor workspace access mode when resource-scoped metrics queries fail
Resource permissions and workspace permissions are separate inputs to a metrics-access decision.
Read the guide
Place an ACR private endpoint outside the subnet delegated to Azure Container Instances
Review subnet ownership before diagnosing an ACI image-pull deployment failure.
Read the guide
Complete the rule and circuit association when creating an ExpressRoute route filter
A route-filter resource alone does not express the intended service-prefix selection.
Read the guide
Verify the actual frontend-port mapping for each inbound NAT target
Match a Load Balancer endpoint to the intended VM before using it for administration.
Read the guide
Include the Virtual WAN global P2S profile in remote-user recovery testing
Verify the endpoint choices available to the actual remote client.
Read the guide