Mastering Azure Networking
uanet
3 days
Upcoming Sessions
Need a private training for your team? Request a private training
Not ready to book yet? Request an offer
Azure Networking
Azure Virtual Networks (VNets) provide the foundation for secure and private communication between virtual machines and other Azure resources. By default, each VNet is isolated, but you can connect multiple VNets using VNet peering to enable seamless communication across environments.
- Virtual Network Overview
- VNet Peering
- NAT Gateway
- LAB: Azure Networking
Azure Virtual Network Traffic Routing
Azure Virtual Networks include default routing tables that determine how traffic flows within and outside the network. To gain more granular control over routing behavior, you can configure user-defined routes or leverage dynamic routing with the Border Gateway Protocol (BGP).
- Virtual Network Design
- System Routes
- User Defined Networking
- Border Gateway Protocol (BGP)
- LAB: Network Routing
Name Resolution
Reliable name resolution is essential for enabling communication between application components in Azure and on-premises environments. Azure offers built-in DNS services as well as Azure Private DNS zones and the Azure DNS Private Resolver to support hybrid and multi-environment name resolution scenarios.
- Azure Public DNS Services
- Azure-Provided Name Resolution
- Azure Private DNS Zone
- Hybrid Name Resolution: Azure DNS Private Resolver
- LAB: Name Resolution
Securing Azure Virtual Networks
Securing network traffic is critical to protecting Azure resources from unauthorized access and attacks. Azure provides multiple network security services that help you control traffic flow, enforce policies, and protect against threats.
- DDoS Proctection
- Network Security Groups
- Azure Firewall
- LAB: Securing Azure Virtual Networks
VNet Integration Options for PaaS Solutions
Platform as a Service (PaaS) solutions are typically exposed through public endpoints, making them accessible over the internet by default. To improve security and reduce exposure, many Azure PaaS services can be integrated with Virtual Networks to restrict public access and enable private connectivity.
- Service Endpoints
- Private Endpoints
- VNet Integration
- App Service Environment
- Hybrid Connections
- LAB: VNet Integration Options for PaaS Solutions
Azure Regional Load Balancers
Azure provides a range of load balancing and traffic distribution services to improve availability, performance, and security. These services can be used individually or combined to design scalable and resilient application architectures.
- Azure Load Balancing Solutions Overview
- Azure Load Balancer
- Application Gateway
- Web Application Firewall
- LAB: Azure Regional Load Balancers
Azure Global Load Balancers
Load balancers can protect against individual resource failures, but you may have to foresee entire region outages as well. Global load balancers will improve high availability and performance of resoures hosted across different locations.
- Traffic Manager
- Azure Front Door
- Comparing Load Balancing Solutions
- LAB: Azure Global Load Balancers
Network Monitoring
Monitoring and troubleshooting network connectivity is a core responsibility of the Azure network administrator. Azure offers a comprehensive set of monitoring and diagnostic tools to help identify misconfigurations, analyze traffic flows, and detect potential security issues.
- Azure Network Watcher
- Network Diagnostic Tools: IP flow verify - NSG Diagnostics - Packet Capture
- Flow Logs
- Traffic Analytics
- LAB: Network Monitoring
Azure Hybrid Networking
Many organizations choose to extend their on-premises networks to Azure to support hybrid cloud scenarios. Azure offers several connectivity options, including VPN Gateways for encrypted tunnels and ExpressRoute for private, dedicated connections to Azure datacenters. For large-scale or complex environments, Azure Virtual WAN simplifies the management of multiple network connections through a centralized interface.
- Virtual Network Gateway
- Site-to-Site Connections
- Point-to-Site Connections
- ExpressRoute
- Azure Virtual WAN
- Azure Virtual Network Hub
- LAB: Azure Hybrid Networking
This course focuses on designing and managing network connectivity in Microsoft Azure. You will learn how network traffic flows within and between Azure environments, how to control that traffic using routing and name resolution, and how to secure network access for cloud and hybrid deployments.
The course covers real-world scenarios such as connecting on-premises networks to Azure, integrating platform services into private networks, and monitoring network traffic to identify issues and enforce security policies. Hands-on labs reinforce the concepts and help you apply best practices when building and operating Azure networks in production environments.
This course is intended for system engineers, system administrators, and network administrators who are responsible for designing, configuring, and managing network connectivity in Microsoft Azure. It is suitable for IT professionals who work with Azure infrastructure and need a solid understanding of Azure networking concepts to support cloud and hybrid environments.
Participants are expected to have general knowledge of networking fundamentals (such as IP addressing, routing, and DNS) and basic experience with Azure or cloud-based infrastructure.
