Microsoft offers many security products to protect data, apps and infrastructure quickly with built-in security services in Azure.
We will overview some of those products in this article
Security Center
Azure Security Center provides unified security management and advanced threat protection across hybrid cloud workloads. Security Center provides followings benefits.
| Centralized policy management | Continuous security assessment | Actionable recommendations | Prioritized alerts and incidents | Advanced cloud defenses | Integrated security solutions |
Identity & Access Managment (AAD)
Azure AD combines core directory services, application access management, and identity protection in a single solution.
| Single Identity | Single Sign On | Rule-based Access | Multi Factor Authentication | Self-Service Password Reset | Identity Protection (P2) | Privileged Identity Management |
Azure Information Protection : AIP
AIP is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels.
| No server infrastructure required | Cloud-based authentication | Built-in support for mobile devices | Default templates | Document tracking and revocation | Classification and labeling | Departmental templates |
Advanced Threat Protection: ATP / ATA
Azure Advanced Threat Protection (ATP) is a cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.
| Monitor and profile | Protect user identities | Identify suspicious activities | Identify advanced attacks | Investigate alerts |
Azure Key Vaults
Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
| Secrets Management | Key Management | Certificate Management | Store secrets |
Azure Application Gateway
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.
| Web application firewall | Secure Sockets Layer (SSL) | URL-based routing | Multiple-site hosting | Redirection | Session affinity | Websocket and HTTP/2 traffic | Connection draining |
Azure DDoS Protection
Backed by the Microsoft global network, DDoS Protection brings massive DDoS mitigation capacity to every Azure region. Scrub traffic at the Azure network edge before it can affect the availability of your service.
| Native platform integration | Turn-key protection | Always-on traffic monitoring | Adaptive tuning | Multi-Layered protection | Extensive mitigation scale | Attack analytics | Attack metrics | Cost guarantee |