Lukas BeranThis article is primarily targeted at Czech state institutions and is based on recommendations of the Czech authority. However,...
My primary focus is the security of identities, devices and data in the cloud using Microsoft services, technologies and tools.
Recommended Conditional Access Policies in Azure AD
Each organization can create policies at its discretion and needs. But there are some policy recommendations that should be developed in all organizations. You can read about conditional access in my previous article. Microsoft internal statistics say that by activating Multi-Factor Authentication (MFA) on user accounts, you eliminate [...]
Lukas Beran Conditional Access for Microsoft cloud services
Conditional access is a very powerful tool for increasing security of your cloud services. However, full conditional access is only available with Azure AD Premium licenses. With Office 365 licenses, you get only the basic preconfigured settings that you can’t change. What is Azure AD Conditional Access Azure AD Conditional Access [...]
Lukas Beran WordPress as a web application in Azure
You can have a website, including WordPress, on a regular server, ie as part of infrastructure services (IaaS – Infrastructure as a Service). But a much better option is to move up a level to platform services (PaaS – Platform as a Service). In platform services, you do not have to worry about operating system, […]
Lukas Beran Encrypted database connection in Adminer
Adminer is a database management tool by Czech author Jakub Vrána. This is a much improved and simplified replacement for the popular phpMyAdmin. However, by default, Adminer does not support encrypted connection to a database. However, fix is very simple 🙂 How to install Adminer plugins Adminer has many official plugins and you can also [...]
Lukas Beran Manage updates with Azure Update Management
I have my lab in Azure, where I run about 10 virtual servers with Windows 10 and Windows Server. And there is also one web server running Ubuntu 18.04. So far I have handled updates manually, so I had to log on to all servers, check for updates, install updates, restart. But Azure Update Management […]
Lukas Beran