Network security strategies

With all the hacking incidents nowadays, a strong network security strategy is key. It is not secure to just create a public IP address and expose your Azure resource to the internet. This will make you vulnerable for attacks. Design your networks with security in mind and reduce what is exposed to the internet. You can use the features that Azure provides for securing your networks. Azure offers support for different security strategies, which are described in the following section. 

DMZ

A demilitarized zone (DMZ) or perimeter network is a physical or logical boundary between the internal and the external network of an organization. The external network can be the internet. The purpose is to add an additional security layer to the internal network. You don't open any ports from the internal network to the internet, but only to the DMZ. Azure offers multiple features that you can use to create a DMZ, such as Network Security Groups (NSGs), firewalls, and User Defined...