Security groups, firewalls, and WAF
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
know what each control does and where it sits.
Planned topics
- Security groups / network security groups (NSGs): stateful allow rules per resource or subnet; the first line of in-network control.
- Network firewalls: central inspection for egress filtering and east-west rules; costs money and is a choke point.
- Web application firewall (WAF): inspects HTTP for common attacks and abusive clients; sits in front of public endpoints.
- Reference security groups by other groups rather than raw IPs where supported.
- Egress control: limit outbound traffic to what is needed to reduce data exfiltration paths.
Draft outline details
Demonstration
a rule table for the order service: inbound only from the load balancer on one port; outbound only to the database and the ERP adapter.
Check your understanding
Which control inspects HTTP traffic for attack patterns?
Show answer
The WAF.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.