How to defend against denial-of-service attacks with Azure DDoS Protection | Azure Friday

[@jabrouni2]

Thanks for this. Very informative. Was interesting to hear Anupam reiterate that DDOS Standard can protect anything within a VNET with a public IP address. What about App services not within VNET? Is there a service that we can use to mitigate against DDOS attacks on PAAS services not within a VNET?

[@ragulansivabalakrishnan461]

Did you get an answer for this question from Microsoft Haripraghash please? If yes please share it with me. Thanks

[@jabrouni2]

Ragulan Sivabalakrishnan no I did not get a reply for that. Based on what I have researched, best bet is to add a WAF in front to at least mitigate L7 attacks. However it won’t entirely eliminate DDOS as DDOS can be done in a variety of ways on L4

[@wshamroukh]

All PaaS services have basic DDoS enabled by default.

[@wshamroukh]

docs.microsoft.com/en-us/azure/app-service/overview-security

[@managold1970]

Good Information. When you say " notification send to Azure security Center and through Azure monitor". DO you mean after the attack has been mitigated by Microsoft, the affected customer receives notifications via Azure Security Center and Azure Monitor?

[@taufiqkhan9023]

The way Anupam is elaborating about DDOS protuction amazing supper cool

[@ahmedmuhsenhaki6771]

Mhhh 2944$/month for an anti ddos attack seems very cheap :')

[@daanand86]

How does WAF/WAG integrate with Azure FW in this scenario.

[@MicrosoftAzure]

Provided as a complimentary service among others like Azure Firewall and DDoS Std, WAF is needed to protect against L7 attacks on web applications viz. sql injection, xss scripting etc. Firewall can allow organizations to control the flow of traffic inbound/outbound from the hub VNET. While DDoS Std, protects the public IPs of both WAF, Firewall and other services in the hub VNET from DDoS attacks. Network security requires holistic approach, defense in depth, zero trust - where if one layer/control is breached; other layers/controls are available to provide protection.

[@truckinallday69]

Sounds expensive

[@mazdanaqvy3754]

Thanks

[@jatinnandwani6678]

Thanks so much