Azure updates

Using Azure Virtual Network Manager network groups in security admin rules is now in public preview

Using your Azure Virtual Network Manager network groups in the source and/or destination of security admin rules is now in public preview, enabling users to achieve network isolation across different environments and manage network segments more easily at scale.

• Azure Virtual Network Manager
• Services
• Security
• Management
• Features

Public preview: Public IP Domain Name Label Scope

Announcing the public preview for a new capability in Azure public IP address that can prevent DNS subdomain takeover while still allowing for re-use of DNS names.

• Azure DNS
• Features

Public preview: Internet inbound for Network Virtual Appliances in Virtual WAN Hubs

Public preview for internet inbound (Destination NAT) capabilities for Next-Generation Firewall Network Virtual Appliances deployed in the Virtual WAN hub. Destination NAT allows network administrators to publish applications to the broader internet through a public IP address assigned to a Firewall Network Virtual Appliance deployed in a Virtual WAN hub.

• Virtual WAN
• Features

Public preview: ExpressRoute guided portal experience for multi-site resiliency

With multi-site resiliency, you can configure your ExpressRoute circuits through more than a single peering location. This helps ensure that your’ private connection to Microsoft remains available even if one of the locations experiences an outage. The experience is targeted at helping you design a highly resilient ExpressRoute solution to connect their on-premises with Microsoft backbone and Azure Virtual Networks.

• Azure ExpressRoute
• ExpressRoute Circuits
• ExpressRoute Gateways
• Services

Migration of Azure Virtual Network injected Azure Data Explorer cluster to Private Endpoints

If you are using VNet injection to secure your Azure Data Explorer (ADX) cluster, you may face some challenges such as complexity, scalability, and public IP dependency. We recommend that you switch to Azure Private Endpoints, which allow you to connect to your cluster privately within your VNet. We have released a preview feature that lets you migrate your VNet injected ADX cluster to Private Endpoints easily and quickly.

• Azure Data Explorer
• Azure Private Link
• Security
• Features

Public preview: Private subnet

Private subnet is a new feature that allows you to create subnets that prevent the creation of insecure default outbound public IP address creation

• Virtual Network
• IP Addresses
• Microsoft Ignite

General availability: Gateway Load Balancer IPv6 Support

IPv6 support for Gateway Load Balancer is now generally available in all regions, enabling bump-in-the-wire network virtual appliance (NVA) insertion for your dual-stack architectures.

• Load Balancer
• Application Gateway
• Services
• Security
• Features

Azure Firewall: Auto-Learn SNAT routes feature is now in public preview

Azure Firewall can now learn address ranges and automatically configure them to be excluded from SNAT, to reduce time and complexity spent manually defining SNAT private ranges.

• Azure Firewall
• Services
• Security
• Features

General availability: ExpressRoute private peering support for BGP communities

Target availability: Q3 2023

Set BGP community tags on traffic sent from Azure to on-premises over ExpressRoute, enabling a greater variety of hybrid network designs.

• Azure ExpressRoute
• Services
• Features