Presented by Microsoft Events with speakers Gopal Shankar and Anupam Vij, this session demonstrates how to use Azure Network Security and Microsoft Defender for Cloud to build secure applications and defend against advanced cyber threats.

Build Secure Applications with Defender and Azure Network Security

Speakers: Gopal Shankar, Anupam Vij
Event: Microsoft Ignite 2025 (Session BRK166)

Session Overview

As AI-driven applications expand, so do cyber threats targeting networks and cloud environments. This advanced session addresses critical aspects of securing workloads in Azure using a comprehensive, defense-in-depth approach.

Key Topics Covered

  • Defense-in-Depth in Azure Security
    Strategies for multi-layered security to protect cloud workloads against advanced threats.

  • Network Defense and Security Layers
    Details about network security architecture and implementation best practices within Azure.

  • Deep Dive: DDoS Protection & Secure-by-Default Mechanisms
    New capabilities for automatic detection and mitigation of DDoS and other network threats to ensure sustained app performance.

  • Threat Detection and Mitigation
    Live demonstration of DDoS threat response and traffic analysis.

  • Transitioning Focus from Internet Protection to Outbound Threats
    Evolving security focus to encompass both inbound and outbound threats.

  • Zero-Trust Security with Chained Web Application Firewall and Azure Firewall
    Tactical guidance on chaining firewalls and web application firewalls for layered, zero-trust defense.

  • Advanced Bastion Capabilities
    Utilizing audit logging and session recording to maintain oversight and compliance.

  • Microsoft Defender for Cloud Introduction
    Leveraging Defender for unified threat management and security posture improvement.

  • Azure Network Security Hub
    Exploring central management of network security resources.

Announcements

  • New features and capabilities for Azure Firewall and DDoS Protection unveiled, empowering organizations to respond to evolving cyber threats.

Demo

  • Live DDoS Mitigation Demo
    Witness real-time automated mitigation of malicious traffic and learn best practices for maintaining performance during attacks.

Resources

Who Should Watch?

  • Cloud Solution Architects
  • Network and Security Engineers
  • DevOps Professionals seeking to enhance cloud application security

Takeaways

  • Understand Azure’s layered security approaches
  • Deploy and manage Azure Firewall and DDoS Protection
  • Integrate Microsoft Defender for Cloud for holistic security postures
  • Stay current on the latest feature updates from Microsoft’s security suite

This content is based on a Microsoft Ignite 2025 breakout session and is presented in English (US). For additional sessions and on-demand resources, visit the Microsoft Ignite site.