Azure Firewall: New Monitoring and Logging Updates

Azure Firewall: New Monitoring and Logging Updates

This article is contributed. See the original author and article here.

Contributors: Eliran Azulai and Yuval Pery


 


Monitoring, management, and innovation are core pillars of Azure Firewall. With this in mind, we are delighted to share the following new capabilities:  


 



  • Resource Health is now in public preview

  • Embedded Firewall Workbooks is now in public preview

  • Latency Probe Metric is now in general availability


 


When you monitor the firewall, it’s the end-to-end experience that we continuously strive to improve. Our aim is to empower you to make informed decisions quickly and maximize your organization’s security demands. Understanding the importance of having visibility into your network, this release focuses on making it easier for you to monitor, manage, and troubleshoot your firewalls more efficiently.


 


Azure Firewall is a cloud-native firewall as a service offering that enables customers to centrally govern and log all their traffic flows using a DevOps approach. The service supports both application and network-level filtering rules and is integrated with the Microsoft Threat Intelligence feed to filter known malicious IP addresses and domains. Azure Firewall is highly available with built-in auto-scaling.


 


Resource Health is now in public preview


 


With the Azure Firewall Resource Health check, you can now view the health status of your Azure Firewall and address service problems that may affect your Azure Firewall resource. Resource Health allows IT teams to receive proactive notifications regarding potential health degradations and recommended mitigation actions for each health event type. For instance, you can determine if the firewall is running as expected with an “Available” status or if there was downtime due to platform events with an “Unavailable” status.


 


This preview is automatically enabled on all firewalls and no action is required to enable this functionality. For more information, see Azure Resource Health overview – Azure Service Health | Microsoft Learn


 


surenj_0-1691777219170.png


Easily view the resource health status and history of your firewall


 


 


Embedded Firewall Workbooks are now in public preview


The Azure Firewall Workbook presents a dynamic platform for analyzing Azure Firewall data. Within the Azure portal, you can utilize it to generate visually engaging reports. By accessing multiple Azure Firewalls deployed throughout your Azure infrastructure, you can integrate them to create cohesive and interactive experiences.


 


With the Azure Firewall Workbook, you can extract valuable insights from Azure Firewall events, delve into your application and network rules, and examine statistics regarding firewall activities across URLs, ports, and addresses. It enables you to filter your firewalls and resource groups, and effortlessly narrow down data sets based on specific categories when investigating issues in your logs. The filtered results are presented in a user-friendly format, making it easier to comprehend and analyze.


 


Now, Azure Firewall predefined workbooks are two clicks away and fully available from the Monitor section in the Azure Firewall Portal UI:


 


surenj_1-1691777219177.png


 


View valuable insights in a dashboard view using Azure Firewall Embedded Workbooks


 


Latency Probe metric is now generally available


 


The Latency Probe metric is designed to measure the overall latency of Azure Firewall and provide insight into the health of the service. IT administrators can use the metric for monitoring and alerting if there is observable latency and diagnosing if the Azure Firewall is the cause of latency in a network. This troubleshooting metric is helpful for proactively engaging in potential issues to traffic or services in your infrastructure.


 


Azure Firewall latency can be caused by various reasons, such as high CPU utilization, throughput, or networking issues. As an important note, this tool is powered by Ping Mesh technology, which means that it measures the average latency of the ping packets to the firewall itself. The metric does not measure end-to-end latency or the latency of individual packets.


 


surenj_2-1691777219188.png


View the overall latency of the Azure Firewall using the Latency Probe metric


 


Learn more


When you’re ready to try these new capabilities, just navigate to Azure Firewall Monitoring in the Azure Portal, and select Logs, Metrics, or Workbooks to use these new features. If you do not have logs, navigate to Azure Firewall Diagnostic settings to get started. And continue to provide us with feedback! To give us feedback just tap the feedback icon surenj_3-1691777219188.pngin the Azure Portal. Your feedback is invaluable in crafting an improved experience that caters to your specific needs.



Learn more in the following support articles:
Latency Probe metric – Microsoft Learn


Resource Health – Microsoft Learn


Azure Firewall Workbook – Microsoft Learn


Azure Firewall – Microsoft Learn


Azure Firewall Manager – Microsoft Learn


 


About the author


Suren Jamiyanaa is a Product Manager in Azure Network Security. She joined the team in 2019 where she focuses on innovating the Azure Firewall product for customers in a modern cloud network strategy. 

Tips & Tricks #5: Unable to login to Azure SQL Managed Instance using AAD Integrated

Tips & Tricks #5: Unable to login to Azure SQL Managed Instance using AAD Integrated

This article is contributed. See the original author and article here.












Issue:


Trying to login to Azure SQL Managed Instance (MI) from SQL Server Management Studio  (SSMS) using AAD-Integrated keeps getting the below error. However, the user is able to connect to MI using AAD-Password, AAD-MFA and SQL Authentication without any issue:



1.png


 


Below is the detailed error from SSMS:


===================================


Cannot connect to mySQLMI.xxxxxx.database.windows.net.


===================================


One or more errors occurred. (mscorlib)


——————————
Program Location:


   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
   at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
   at System.Data.SqlClient.SqlInternalConnectionTds.GetFedAuthToken(SqlFedAuthInfo fedAuthInfo)
   at System.Data.SqlClient.SqlInternalConnectionTds.OnFedAuthInfo(SqlFedAuthInfo fedAuthInfo)
   at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)
   at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean ignoreSniOpenTimeout, TimeoutTimer timeout, Boolean withFailover, Boolean isFirstTransparentAttempt, Boolean disableTnir)
   at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString connectionOptions, SqlCredential credential, TimeoutTimer timeout)
   at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(TimeoutTimer timeout, SqlConnectionString connectionOptions, SqlCredential credential, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance)
   at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling, SqlAuthenticationProviderManager sqlAuthProviderManager)
   at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
   at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup, DbConnectionOptions userOptions)
   at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
   at System.Data.ProviderBase.DbConnectionClosed.TryOpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
   at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.Open()
   at Microsoft.SqlServer.Management.SqlStudio.Explorer.ObjectExplorerService.ValidateConnection(UIConnectionInfo ci, IServerType server)
   at Microsoft.SqlServer.Management.UI.ConnectionDlg.Connector.ConnectionThreadUser()


===================================


One or more errors occurred. (mscorlib)


——————————
Program Location:


   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
   at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
   at System.Threading.Tasks.Task`1.get_Result()
   at System.Data.SqlClient.SqlInternalConnectionTds.c__DisplayClass134_1.b__0()
   at System.Threading.Tasks.Task`1.InnerInvoke()
   at System.Threading.Tasks.Task.Execute()


===================================


<S:Envelope xmlns:wsa="http://www.w3.org/2005/08/addressing” xmlns:wsse=”http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd” xmlns:wsu=”http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd” xmlns:wsp=”http://schemas.xmlsoap.org/ws/2004/09/policy” xmlns:wst=”http://schemas.xmlsoap.org/ws/2005/02/trust” xmlns:S=”“>http://www.w3.org/2003/05/soap-envelope”> S:mustUnderstand=”1″ wsu:Id=”Action”><A class="fui-Link ___1eya986 f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn" title="http://schemas.xmlsoap.org/ws/2005/02/trust/rstr/issue%3c/wsa:action%3e%3cwsa:to" href="http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issuehttp://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue S:mustUnderstand=”1″ wsu:Id=”To”><A class="fui-Link ___1eya986 f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn" title="http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous%3c/wsa:to%3e%3cwsse:security" href="http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymoushttp://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous S:mustUnderstand=”1″><wsu:Timestamp wsu:Id="TS" xmlns:wsu="2021-06-03T14:54:06.2749193Z2021-06-03T14:59:06.2749193Z2021-06-03T14:54:06.2749193Z2021-06-03T14:59:06.2749193Z”>http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd”>2021-06-03T14:54:06.2749193Z2021-06-03T14:59:06.2749193Z xmlns:S=”“>http://www.w3.org/2003/05/soap-envelope”> xmlns:wsu=”http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd” xmlns:wsp=”http://schemas.xmlsoap.org/ws/2004/09/policy” xmlns:wst=”“>http://schemas.xmlsoap.org/ws/2005/02/trust”> xmlns:wsa=”“>http://www.w3.org/2005/08/addressing”> xmlns:psf=”0x8004882c0x80045b00″ target=”_blank” rel=”noreferrer noopener” aria-label=”Link http://schemas.microsoft.com/Passport/SoapServices/SOAPFault”>0x8004882c0x80045b00″>http://schemas.microsoft.com/Passport/SoapServices/SOAPFault”>0x8004882c0x80045b00 (System.Data)



Reason:


This error may occurs when the computer account “AZUREADSSOACC” has an issue such as being removed or disabled for some reason.


How this account created:


When you enable Azure Active Directory Seamless Single Sign-On feature from Portal; this account will be created in your on-premises Active Directory (AD) in each AD forest that you synchronize to Azure AD (using Azure AD Connect), along with a number of Kerberos service principal names (SPNs) that are created to be used during the Azure AD sign-in process.


Azure Active Directory Seamless Single Sign-On feature will allow the users to login to their Azure SQL without the need to type in their passwords, and usually, even type in their usernames as shown below: 

3.png



Mitigation:



  • If the user removed the computer account “AZUREADSSOACC“, we recommend to re-enable the Azure Active Directory Seamless single sign-on feature if possible.

  • If the user disabled the computer account “AZUREADSSOACC“, they can follow the below steps to enable it back:


    • To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.




    • In the console tree, click Computers.


      Where? Active Directory Users and Computersdomain nodeComputers


      Or, click the folder that contains the computer account that you want to enable as shown below:

      4.png




    • In the details pane, right-click the desired computer account, and then click Enable Account.






For more information about this issue, please refer to the following documents:



 












Microsoft Purview in the Real World (August 11, 2023) – Encrypted Emails and Purview eDiscovery

Microsoft Purview in the Real World (August 11, 2023) – Encrypted Emails and Purview eDiscovery

This article is contributed. See the original author and article here.

James_Havens_1-1691794039632.png


 


 


 


Disclaimer


This document is not meant to replace any official documentation, including those found at docs.microsoft.com.  Those documents are continually updated and maintained by Microsoft Corporation.  If there is a discrepancy between this document and what you find in the Compliance User Interface (UI) or inside of a reference in docs.microsoft.com, you should always defer to that official documentation and contact your Microsoft Account team as needed.  Links to the docs.microsoft.com data will be referenced both in the document steps as well as in the appendix.


All the following steps should be done with test data, and where possible, testing should be performed in a test environment.  Testing should never be performed against production data.


 


Target Audience


Microsoft customers who want to better understand Microsoft Purview.


 


 


Document Scope


The purpose of this document (and series) is to provide insights into various user cases, announcements, customer driven questions, etc.  It is not meant as the final answer to all Purview related questions.


 


 


Topics for this blog entry


Here are the topics covered in this issue of the blog:



  • Topic – Purview related eDiscovery and Office Message Encrypted (OME) emails

  • Use Case #1 – legal or HR review of Office Message Encrypted (OME) emails within Purview eDiscovery

  • Use Case #2 – legal or HR review of OME emails that have been exported from Purview to a PST and/or Exchange Mailbox and then opened within an Outlook thick client.


 


Out-of-Scope


This blog series and entry is only meant to provide information, but for your specific use cases or needs, it is recommended that you contact your Microsoft Account Team to find other possible solutions to your needs.


 


Not done – OME and eDiscovery


 


 


1 – Roles Based Access Control (RBAC) for Purview


 


If you want to leverage Purview RBAC roles to access and view emails/files, you will need to open the Purview eDiscovery console.  The Purview RBAC roles are not “usable” within Outlook thick or thin clients.


Here is a link to the RBAC information and a screenshot related specifical the Review role within that RBAC:


Assign eDiscovery permissions in the Microsoft Purview compliance portal | Microsoft Learn


 


 


James_Havens_0-1691794131776.png


 


2 – Accessing emails that have been encrypted via OME inside of Purview eDiscovery


 



  • Let us first understand how Purview deals with encrypting/decrypting data, as it relates to eDiscovery.  The following chart from Microsoft documentation should provide more light on what is decrypted in the Standard and Premium versions of Purview.


 


Decryption in Microsoft Purview eDiscovery tools | Microsoft Learn


 


James_Havens_1-1691794176828.png


 



  • The following is the link and screenshot to the Microsoft documentation that tells you what Purview eDiscovery tasks can be run on encrypted data.


 


Decryption in Microsoft Purview eDiscovery tools | Microsoft Learn


 


James_Havens_2-1691794191848.png


 


 



  • In conclusion, if you have the proper version of Purview eDiscovery (ie. Premium) and the proper RBAC role, you can view emails that have been encrypted using OME.


 


3 – Accessing emails that have been encrypted via OME and then exported to a PST and/or Exchange mailbox


 


 


Before we start this section, please note that review of eDiscovery related data from within Outlook is not a Microsoft best practice.  We recommend you perform your reviews from within Purview eDiscovery or another eDiscovery solution designed for legal and HR investigations.


 


With that being stated, let us look at what options are available if you do decided to try and review encrypted (OME) that has been exported from Purview eDiscovery.


 



  • First, let us return to the supported decryption charted from above, we can see what versions of Purview support decryption of data when exporting to PST files.


 


Decryption in Microsoft Purview eDiscovery tools | Microsoft Learn


 


James_Havens_2-1691794272908.png


 


 



  • Next, let us again return to one of the charts above, notice that you can export encrypted data (to email/PST).  This applies to the export of encrypted data but DOES NOT decrypt data as part of its export process.


 


 


Decryption in Microsoft Purview eDiscovery tools | Microsoft Learn


 


James_Havens_1-1691794261702.png


 


 



  • So, this begs the following:

    • Question – if my data is exported and still encrypted with OME, how can I read OME emails from the exported PST file?




 



  • Answer – The official answer is you need additional rights tied back to RMS, in particular the RMS Decrypt role.  Please note the information in the following link and screenshot for specifics.


 


 


Decryption in Microsoft Purview eDiscovery tools | Microsoft Learn


 


 


James_Havens_0-1691794248122.png


 


 


From the link and screenshot above, there are 2 items listed:



  • You need to assign the RMS Decrypt role to your user performing the review.  This is separate from the Reviewer role specific to Purview eDiscovery.

  • It is recommended that you run the ScanPST.exe tool on the exported PST.  This tool does not decrypt data only verifies and fixes PST files that might have become corrupted.


 


Important Note


 


For a deeper understanding of what rights are needed and work flow you should follow (if you are pursuing this email review process) you should contact your Microsoft Account Manager or certified Microsoft Partner.


 


Appendix and Links



 



 



 



 


 

Understanding your Azure savings plan recommendations

Understanding your Azure savings plan recommendations

This article is contributed. See the original author and article here.

Learn how you can save money with the Azure saving plan recommendations. with your host Thomas Maurer and Azure savings plan expert Obinna Nwokolo.


 


Azure savings plan feature recap.


 


Azure savings plan for compute is an easy and flexible way to save money on compute services spend compared to pay-as-you-go (PAYG) prices. What customers do is you can commit to an hourly amount to spend over a one to three-year and in exchange for that you get significant discounts over the on-demand prices.


 


Purchase savings plans in the Azure portal.


 


You can purchase Azure savings plan by going to Azure Portal.


 



  1. Login to the Azure Portal.

  2. In the search box, search for “Savings plan”, click on that.


 


AriyaKhamvongsa_0-1691740373514.png


 



  1. You’ll be brought to the Savings plan blade where you can click “Add” and then you can go through the purchasing process just by filling out the necessary information.


How are savings plan recommendations generated?


 


Thomas mentioned that when he talks to customer using the savings plan, he gets a few common questions such as “How much commitment should I make?” or “How do I select the right savings plan?” and so on because it varies by individual cases One other question, he gets asked is “How are Azure savings plans recommendations generated?”


 


From Obinna’s experience it is very difficult to figure out exactly how much to commit and so Microsoft tries to do that work for you. Microsoft looks at your hourly usage, what you’ve spent on savings plan eligible resources over the last 7, 30, and 60 days. Then Microsoft does some calculations where they try to determine what would have been the optimal savings plan amount for each hour within the 7, 30, or 60 day timeframe. Then Microsoft takes that optimal savings plan amount and attempts to simulate what would have happened had you made that savings plan purchase and your savings projected. After all those simulations have been done, Microsoft takes the top ten of those simulations that resulted in positive savings and presents those to you as recommendations. Your recommendations are based on what you’re actually spending.


 


Demo of Azure savings plan and explanation of calculations.


 


In the video below there is a segment where there is a demo. For example, let’s talk about a customer that would be a good fit for Azure savings plan. Our fictional customer Contoso runs a helpdesk service and because they are serving globally, it’s important for them to leverage compute services through multiple regions over the course of the day.


 


AriyaKhamvongsa_1-1691740373540.png


 


 


This makes them a really good candidate for the Azure savings plans. So, in this example how does Microsoft generate the recommendation is going to go through several steps.


 



  1. Microsoft figures out what did you spend, this could be called the “commitment candidates”. These are the amounts that say for this hour this is the optimal savings plan amount.

  2. Then some simulations are run where Microsoft figures out what you would have saved if you had that commitment.

  3. Then Microsoft simulates all 720 commitment candidates; it is going to say here are the top 10 and this is what we’re going to present to you as a customer.


 


AriyaKhamvongsa_2-1691740373556.png


 


 


To recap, Microsoft wants to start by looking at your usage. In this scenario, when Microsoft looks at Contoso’s usage over 720 hours. Microsoft goes through hour one, hour two all the way down to the last hour for that period and says “this is your usage and what did they actually spend?”.


 


You can see how this is calculated in this example a little bit over $7.00, so $7.32 and fractions of that. Then Microsoft says, “let’s figure out that same answer for all of the remaining hours within that 30 day look back period.” Which in this case is 720 distinct hours (24 hours x 30 days = 720 hours). So now that Microsoft knows what they were spending for every single hour, Microsoft wants to understand what the optimal savings plan amount is for each one of those hours.


 


Microsoft then applies the Azure savings plan discount for each one of those hours and then calculates what’s the net resultant savings plan commit optimal amount. So, in this example their usage of on demand cost was $7.32 for hour one. When the savings plan discounts are applied, we find that the right amount for them, from a savings plan perspective, is a little bit more than $3.30.


 


So, we now know this is the optimal amount for our number one. Let’s take our number one’s value and apply to our number two, our number three and all the remaining hours in that 720-hour window. And so, we’re going to follow the benefit application rules that exist for savings plan, look at the meter that has the greatest discount and apply the savings plan to that first and then work our way down. As we go through that process in this particular example, we find that a $3.30 savings plan isn’t actually enough to fully cover that first meter so there’s going to be some overage. We’re going to fully consume the savings plan and then we’re going to incur an on-demand cost of $1.57. Then we’re going to go on that second meter and we’re going to, because the savings plan is gone, just charge that one as the full on-demand rate. So, the net of this is as we go through this, we see that we incurred a total simulated cost of $6.87. That’s actually still better than the on-demand cost that the customer had coming in which was $7.32. So, this $3.30 savings plan for our number two resulted in a net savings of $0.44 which is progress. As we go through each one of those hours, if a candidate results in a positive savings, we want to keep it because it’s got potential but if it doesn’t, we want to discard it. So we’re going to run this analysis for our number two, our number three, all the way to 720 when we finish for each individual hour, each individual simulation, we want to compare all of them.


 


In this case, again, we have 720 candidates. We’re going to simulate each one of those against every single hour. The result of this is about a little bit over 500,000+ calculations in this period and when we finish this whole process, we’re going to select up to the top 10 candidates that actually resulted in savings and that’s what you end up seeing within the Azure portal UI when you click into the billing into the hourly commitment.


 


You’ll see in this example we’ve presented for $1.43 all the way to $1.43 and a little bit more change along with providing the commitment amount, we do provide additional information. It says here’s your expected savings percentage as well as the expected coverage and this is the coverage that this savings plan and any other reservations and or savings plan you’ve previously purchased would have provided for you.


 


We think that’s really good information to help you make the right choice, but you still also have the ability to put a custom amount if you want to go a little bit less. We wouldn’t recommend going over because as you go over you have additional waste and again this is focused on making sure we provide you with the greatest cost savings.


 


Resources to help you learn more about Azure savings plan.


 


Microsoft has lots of resources to help you figure this out. Learn more at the Azure savings plan for compute https://aka.ms/savingsplan-compute to understand broadly how savings plan works. You can also read about Azure savings plan for compute at Microsoft Learn https://aka.ms/savingplans/doc and about Cost Management APIs at Microsoft Learn https://aka.ms/CostManagement/API.


 


Recommended Next Steps:


 


 If you’d like to learn more about the general principles prescribed by Microsoft, we recommend Microsoft Cloud Adoption Framework for platform and environment-level guidance and Azure Well-Architected Framework. You can also register for an upcoming workshop led by Azure partners on cloud migration and adoption topics and incorporate click-through labs to ensure effective, pragmatic training.


 


You can view the whole video below.


 


AriyaKhamvongsa_3-1691740373562.jpeg


 


 

Azure Marketplace new offers – August 10, 2023

Azure Marketplace new offers – August 10, 2023

This article is contributed. See the original author and article here.

We continue to expand the Azure Marketplace ecosystem. For this volume, 106 new offers successfully met the onboarding criteria and went live. See details of the new offers below:


 



































































































































































































































































































































































































































Get it now in our marketplace


Atalo.png

Atalo: Hosted and powered by Microsoft Azure, Atalo by Cadvil helps businesses manage all aspects of operations such as HR, production, finance, inventory, and more. Increase efficiency and drive growth with this comprehensive solution with affordable SaaS pricing.


Avanti - Managed Cloud Development Platform.png

Avanti – Managed Cloud Development Platform: Focus on value and time to market and let the Avanti platform manage all the infrastructure components involved in your software development cycle. Avanti is optimized for Microsoft Azure and follows Microsoft guidelines for a scalable and secure setup.


C3 Generative AI Production Pilot.png C3 Generative AI: Production Pilot: The C3 Generative AI production pilot facilitates a transformative human-computer interaction approach allowing enterprise users to quickly access critical information and relevant data through a natural language interface.
Cadvil SPOT.png

Cadvil SPOT: SPOT by Cadvil is an employee engagement and recognition application designed to increase employee morale, collaboration, team building, and production while reducing attrition, absenteeism, employee conflicts, training costs, and HR workload.


CGT Watch.png

CGT Watch: This SaaS platform offers a comprehensive suite of tools for biopharma executives to access information and gain valuable insights about cell and gene therapy developments. Stay ahead of market trends and maximize opportunities for success with CGT Watch.


Ciro Hotel Booking Engine.png

Ciro Hotel Booking Engine: Search hotel listings and book rooms with this app from Tecnoglare Infotech Pvt. Ltd. Sort listings by location, price, name, and star category. The solution can be integrated with all major payment gateways.


CIS Benchmark L1 on Microsoft Windows 11 Enterprise.png

CIS Benchmark L1 on Microsoft Windows 11 Enterprise: Center for Internet Security (CIS) provides an image of Microsoft Windows 11 Enterprise that’s hardened according to a CIS Benchmark. Level 1 (L1) profile settings within the CIS Benchmark have been applied to provide clear security benefits.


CKYC for Banking and Financial Institutions.png

ShareDocs Enterpriser CKYC Management Tool: ShareDocs Enterpriser provides a central repository for banking and financial institutions to maintain know-your-customer records. ShareDocs Enterpriser uses face recognition technology to automatically capture photos and data from forms.


Client-Side Global Server Load Balancer.png

Client-Side Global Server Load Balancer: DynConD’s client-side GSLB (global server load balancer) is used by replicated and distributed network services for optimal server selection by taking into account network distance, service response time, and server load.


CloudCasa Kubernetes Backup Service.png

CloudCasa: Kubernetes Backup Service: CloudCasa, a backup, recovery, and cluster migration service that’s compatible with Azure Kubernetes Service, lets you centrally manage the open-source backup tool Velero across multiple clusters and cloud providers.


CloudDRaaS for VMware Cloud Director .png

CloudDRaaS: C-Data’s CloudDRaaS is a disaster recovery solution for VMware Cloud Director and vSphere. Users can replicate tenant vSphere workloads between an on-premises vCenter Server instance and a provider-hosted instance, or between provider-hosted vCenter Server instances.


CUBIKA Big Insight - Low Code Big Data Management.png

CUBIKA Big Insights: CUBIKA Big Insights applies machine learning, analytics, and Digital Dialogue’s natural language processing to task automation, categorizing, and standardizing data. Manage your big-data environment with an automated, governed, and secure platform.


Custom LLM Model Training for Chat Search Service.png

Custom LLM Model Training for Chat Search Service: Neuu Labs Pvt. Ltd.’s Chat.usln.in platform lets you train chatbots on custom data so it can respond to queries. The large language model (LLM) training is appropriate for customer support, sales assistance, task automation, or information retrieval.


Debian 11.png

Debian 11: This offer from AskforCloud provides Debian 11 on a Microsoft Azure virtual machine. Debian is an open-source Linux-based operating system known for stability and smooth upgrade processes.


Debian 11 bullseye.png

Debian 11 Bullseye: This offer from AskforCloud provides Debian 11 (called Bullseye in development) on a Microsoft Azure virtual machine. Debian is an open-source Linux-based operating system known for stability and smooth upgrade processes.


decisionOS Cutting Edge Causal AI.png

decisionOS by Causal AI: decisionOS powered by Causal AI is a suite of Python packages that can determine the causal effect of your actions and root cause of outcomes. You can assess, quantify, and fix the fairness of your data and models different business-critical scenarios.


Deepsight AI Platform.png

Deepsight AI Platform: DeepSight AI Labs’ computer vision platform utilizes AI to quickly parse your video analytics data so you can instantly detect specific objects and potential threats from multiple live cameras. It can be integrated with various IoT devices to make your existing setup smarter. 


Digital Platform Conductor Automate Intelligently.png

Digital Platform Conductor: ReadyWorks offers a comprehensive view of your IT estate by automating critical workflows and accurate compliance in your IT processes. It analyzes crucial data, facilitating responses to security and compliance audits with verified asset data, ensuring CMDB accuracy.


eekox for Remote Workspace Management.png

eekox for Remote Workspace Management: eekox’s Work as a Service (WaaS) credit-based solution empowers corporate nomads in your organization by providing them with an ideal workspace that promotes productivity and well-being. The platform utilizes Microsoft Azure for scalability and security.


eekox for Team Building.png

eekox for Team Building: Designed to foster team unity and cohesion, eekox’s instant booking tool allows employees to choose the best space and plan for team building. Foster unity in remote work environments and ensure your team functions smoothly.


E-invoice and E-way bill.png

E-Invoice and E-Way Bill: Experience the convenience of integrating and generating E-Invoices and E-Way Bills with LogiTax’s solution. The app offers real-time validation, seamless integration, and instant transmission leading to faster processing and improved cash flow.


Engauge.png

Engauge: Utilizing a single, unified interface that houses multiple CPaaS companies and gateway providers, Engauge by Decisive Analytical Systems enables digital marketing agencies to capitalize on cost-saving opportunities, streamline invoice management, and deliver a consistent UI/ UX experience.


ERP FOR PHARMA.png

ERP for Pharma: This ERP suite of solutions for Pharma provides end-to-end bidirectional traceability, ensures compliance, and enhances the quality, consistency, and speed to deliver drugs to market. The application allows you to streamline your workflow and cut production costs.


ERP SMS.png

ERP School Management System (SMS): This integrated educational ERP solution streamlines, automates, and simplifies campus administration and enables educators to make quick and thoughtful decisions that enhance student and faculty performance and ultimately drives institutional growth.


FinanzOS for Tally.png

FinanzOS for Tally: Reconcile all your accounting data sets across a wide range of sources with FinanzOS, a finance automation platform from Thoughtle Technologies. Enhance productivity and improve your cash flow efficiency via insights into your accounts receivable and accounts payable data.


FinStinct.png

FinStinct: FinStinct uses the power of AI/ML and NLP to automate and streamline the processing of unstructured data in the financial services industry. It can even convert complex financial and legal documents into personalized videos for analysis.


FinView.png

FinView: Enhance your customer engagement by converting complex bank, credit card, portfolio, and mutual fund statements into personalized videos. FinView sends the video clip of the research highlights and statement analysis by secure email to your clients.


FlyPal-CRS.png

FlyPal-CRS: Simplify crew management and ensure the proper balance of competent, well-rested crew members on board with FlyPal Crew Rostering System (CRS) from BytzSoft. The application can be configured to meet the needs of general aviation operations or commercial airlines.


FlyPal-SMS neo.png

FlyPal-SMS Neo: Proactively mitigate safety risks and enable data-driven decision making with aviation app FlyPal Safety Management System (SMS) Neo from BytzSoft. Comprehensive incident analysis tools and modules ensure compliance with international safety regulations.


FocusX - AI-Powered ERP.png

FocusX – AI-Powered ERP: This AI-powered ERP with in-memory computing and industry-ready templates empowers businesses with ML-driven statistics, predictive analytics, and forecasting. Customers can cherry-pick their desired modules for effective communication and secure transactions.


Foresiet.png

Foresiet: This SaaS offer from Foresiet provides an AI-powered integrated digital risk protection platform that can identify and forecast risks by analyzing over 100+ unique vectors across on-premises and cloud deployments. Get deeper visibility through content-specific threat intelligence.


Goodbook.png

Goodbook: Experience the convenience of quickly generating custom pay slips with Goodbook’s intuitive platform. The application provides personalized pay slips and simplifies your payroll process, even if you have no prior accounting knowledge.


GST Return & Reconciliation.png

GST Return & Reconciliation: LogiTax streamlines the filing process, saving time and ensuring accuracy, thereby optimizing cash flow during upload for businesses with multiple GSTINs. It provides intelligence-driven reconciliation reports for easy ITC claims and vendor management.


HiFairs Virtual Art Rooms.png

HiFairs: Virtual Art Rooms: This SaaS offer from HIDS Technologies uses augmented, virtual, and extended reality to create 2D and 3D virtual art rooms. It supports artists, buyers, and sponsors by creating a digital ecosystem to assist with branding and selling of art products.


HiLearner Interactive Platform for Learning.png

HiLearner: Interactive Platform for Learning: Designed to support e-learning, this SaaS offer from HIDS Technologies uses augmented, virtual, and extended reality to host, design, and tailor your classrooms, workshops, and labs. Learn to do more with less, while maintaining scalability and reliability.


iAQT.png

iAQT: iAQT is an end-to-end SaaS platform for managing your Out-of-Home (OOH) media inventory. It ensures continued visibility of point-of-sale visual media assets and real time campaign status reporting for closed loop management.


iCert Global HRM.png

iCert Global HRM: Streamline administrative tasks and engage effectively with customers by delivering personalized experiences through the right channels at the right time with iCert Global HRM. This comprehensive HR management solution fosters customer loyalty.


iCertGlobal LMS.png

iCertGlobal LMS: iCert Global’s Learning Management System is a self-paced, live online training solution providing professional certification courses. Accelerate your career with data-driven digital classrooms that offers seamless collaboration between students and teachers.


Ideanote.png

Ideanote: Ideanote enables goal-driven innovation by collecting, developing, and managing ideas efficiently within Microsoft Teams. Available in multiple languages, the app helps enterprise users achieve strategic goals, enhance customer experiences, and reduce costs.


iMXM.png

iMXM: This mobile-enabled point-of-sale visual merchandise management solution is tailored for retail chains and brands. iMXM manages your media inventory across stores, right from planning to installation and monitoring, with real time inventory analytics and campaign planning.


iTrans.png

iTrans: An IoT-based solution, iTrans is a blood transportation and Haemovigilance box that addresses key principles for bedside transfusion safety. It ensures patient identification alignment connecting the Haemovigilance checklist directly with the blood issue process for enhanced safety and accuracy.


KappaX.png

KappaX: KappaX significantly enhances customer engagement, brand recall, and sales with AI-powered interactive experiences. The collaborative, no-code platform combines customer experience with interactive storytelling and uses videos to drive brand action.


Kriyam FieldSutra.png

Kriyam FieldSutra: Kriyam FieldSutra streamlines field operations by automating and optimizing your workforce scheduling, dispatching, and tracking. The app provides real time updates allowing you to make informed decisions and respond quickly to customer service requests.


Kyvos.png

Kyvos: Kyvos’ semantic layer solution simplifies and accelerates analytics for business intelligence and data science teams. It allows you to analyze massive amounts of historical data at scale while enabling sub-second query response times for complex queries.


Laabam One ERP.png

Laabam One ERP: This SaaS offer from Laabam provides an end-to-end cloud-based enterprise resource planning solution to optimize operations around billing, accounting, GST, and stocks. It supports mobile app integration for efficient data handling and management.


Lever.Tax Lite.png

Lever.tax Lite: Designed for startups and small businesses, Lever.tax Lite simplifies the process of accessing tax credits for R&D expenses related to employee salaries. The solution offers a user-friendly form for eligibility assessment, application preparation, and submission.


Lever.Tax Premium.png

Lever.tax Premium: Experience a simpler, faster, and more cost-effective approach to obtaining tax benefits with AI-powered Lever.tax Premium. The app generates R&D reports and application details for tax credits tailored to your country’s rules and requirements.


MFISM - Multi Features IoT Smart Energy Meter.png

Multi Feature IoT Smart Energy Meter: This app from Delving Research measures 3-phase electrical parameters as well as physical parameters using IoT sensors. It works via GSM, Wi-Fi, or Ethernet and can calculate required capacitor values for power factor improvement with alarm/trip controls.


MTARGET The Email Company.png

MTARGET: The Email Company: MTARGET helps deliver personalized emails at scale without having your organization maintain its own email server. Gather high-quality leads and retain customers using this AI-powered platform with SMTP relay, transactional email API, email validator, and more.


NetApp BlueXP (Annual).png

NetApp BlueXP (Annual): BlueXP abstracts the complexity of architecting underlying Azure infrastructure resources, making it easier to deploy and operate NetApp’s storage, mobility, protection, and analysis services within your Azure environment. This offer is for an annual subscription.


Novus.png

Novus: Novus streamlines the organization of conference data and offers seamless navigation across multiple conferences relating to oncology. It fosters networking, encourages attendee feedback, and integrates with popular calendar applications.


Omada Identity Cloud.png

Omada Identity Cloud: Omada Identity Cloud is a robust identity, governance, and administration service solution. It enhances your Azure Active Directory environment by monitoring identities, groups, teams, and data along with access management workflows and advanced identity analytics.


Omnisient Secure Data Sharing & Exchange Platform.png

Omnisient: Omnisient’s platform allows businesses to securely share, monetize, and access 1st party data. It enables businesses to perform market benchmarking and create new revenue streams while protecting consumer privacy and ensuring data sovereignty.


Plumb5.png

Plumb5: Plumb5 is a customer engagement platform that automates conversion and retention strategies in real time by intelligently connecting all customer touchpoints. It helps your business grow exponentially with effective tagging strategies and auto segmentation.


Qualitas EagleEye Edge Application.png

Qualitas EagleEye Edge Application: This standalone application offers on-premises deployment of AI models allowing you to effortlessly run AI models in any framework. The Qualitas EagleEye Edge deployment tool is used for image capture, annotation, deep learning training, and more.


Qualitas EagleEye Platform.png

Qualitas EagleEye Platform: Qualitas EagleEye Platform automates quality control in manufacturing using computer vision technology to extract insights from visual data, streamline tasks, and improve decision-making processes through data labelling, report generation, and inferencing.


Relatude CMS.png

Relatude CMS: Relatude, a unique content management system focused on APIs, offers a combination of AI capabilities, a graph-based content model, and an efficient core engine. Its intuitive user interface caters to content producers while providing developers with data models for advanced functionality.


Relatude E-commerce.png

Relatude E-Commerce: Whether you’re working on critical B2B e-commerce solutions or simple B2C web shops, the Relatude e-commerce application seamlessly blends content and commerce, enabling you to build a cohesive online business.


Relatude Web Application Framework.png

Relatude Web Application Framework: Relatude Web Application Framework (WAF) rapidly develops advanced web applications with AI-powered features, graph-based content model, and an efficient core engine. Developers can reduce risks and save time as WAF handles a significant portion of the code.


Rexo Campus.png

Rexo Campus: Designed to help students make informed decisions, Rexo Campus provides data transparency and convenience for educational institutions. The software assists with student registration, examination management, fee collection, HR, and payroll.


Rexo-ERP.png

Rexo ERP: Rexo ERP is a flexible, scalable solution that offers multiple cross-platform features to meet the specific needs of educational institutions. It helps schools of any size manage students, teachers, courses, and academic programs using big data and cloud analytics.


Safetrans.png

Safetrans: SafeTrans is a vein-to-vein blood transfusion traceability software that tracks, records, and supports good transfusion practices. It enables blood banks to eliminate cognitive process-based bias errors by ensuring consistent adherence to configured blood transfusion rules.


Shevalues - Diversity Hiring (SaaS).png

SheValues – Diversity Hiring (SaaS): SheValues is a SaaS-based recruitment platform that promotes gender equality in the workplace by connecting women in non-IT segments with job opportunities. It aids in candidate sourcing, applicant tracking, and collaborative decision-making during hiring.


Taskurai.png

Taskurai: Taskurai is a scalable platform for running background tasks and jobs using serverless queues and containers. Build your applications with a powerful and easy to use .NET SDK that’s designed to be robust and resilient and equipped with automatic and configurable retry patterns.


TeamPilot Enterprise Workforce Management .png

TeamPilot Feild Service Management: TeamPilot Field Services by LocationGuru empowers service organizations to efficiently dispatch and monitor their teams in the field while digitizing work orders, expense claims, and inventory management.


Tekmon ESG Reporting.png

Tekmon ESG ReportingTekmon’s no-code platform allows users to easily browse prebuilt templates and automate data collection processes to address environmental, social, and governance issues. It enables organizations to create value from their ESG strategy, data, and reporting.


Thirdray Data Platform.png

ThirdRay Data Platform: ThirdRay Data Platform is a cloud-based service that automates extraction, processing, analytics, and integration of structured content from documents, video, and voice assets to create real-time actionable business insights.


TxHelpDesk.png

TxHelpDesk: TxHelpDesk is an omnichannel ticketing tool that allows businesses to deliver a unified and consistent support experience by centralizing customer interactions, automating workflows, and ensuring efficient handling and monitoring of customer requests.


Video Analytics, Transcoding & Storage Optimisation.png

Video Analytics, Transcoding & Storage Optimization: Neuu Labs’ video and image converter supports an extensive range of formats, ensuring compatibility with different devices and platforms. With just a few clicks, you can convert your media files to the format that suits your needs.


Vision AI For Manufacturing.png

Vision AI For Manufacturing: Using advanced machine learning algorithms, Thinking Stack’s Vision AI for Manufacturing optimizes operational efficiency, improves product quality, and increases safety standards across the factory floor.


Vision AI For Retail Sector.png

Vision AI For Retail Sector: Thinking Stack’s Vision AI for Retail ensures that your store layout and product placement comply with your planogram. It also provides crowd analytics by processing real-time video feeds and sends alerts about low-stock, out-of-stock, or misplaced items.


AskforCloud.png

WireGuard on CentOS 7: This offer from AskforCloud provides WireGuard along with CentOS 7 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.


AskforCloud.png

WireGuard on CentOS 8: This offer from AskforCloud provides WireGuard along with CentOS 8 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.


AskforCloud.png

WireGuard on Debian 10: Providing a ready-to-use environment to implement encrypted virtual private networks, AskforCloud’s image includes WireGuard on Debian 10. More performant than OpenVPN, WireGuard is a general-purpose VPN that can run on embedded interfaces and supercomputers.


AskforCloud.png

WireGuard on Debian 11: Providing a ready-to-use environment to implement encrypted virtual private networks, AskforCloud’s image includes WireGuard on Debian 11. More performant than OpenVPN, WireGuard is a general-purpose VPN that can run on embedded interfaces and supercomputers.


AskforCloud.png

WireGuard on Red Hat Enterprise Linux 7: This offer from AskforCloud provides WireGuard along with Red Hat Enterprise Linux 7 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.


AskforCloud.png

WireGuard on Windows Server 2012 R2: This offer from AskforCloud provides WireGuard along with Windows Server 2012 R2 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.


AskforCloud.png

WireGuard on Windows Server 2016: This offer from AskforCloud provides WireGuard along with Windows Server 2016 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.


AskforCloud.png

WireGuard on Windows Server 2019: This offer from AskforCloud provides WireGuard along with Windows Server 2019 on a Microsoft Azure virtual machine. WireGuard is an open-source virtual private network (VPN) that utilizes state-of-the-art cryptography for encryption.



Go further with workshops, proofs of concept, and implementations


Data Journey using Microsoft Fabric 1-Day Workshop.png

Data Journey using Microsoft Fabric: 1-Day Workshop: Capgemini’s workshop will present an overview of Microsoft Fabric and articulate its value, then identify a sample use case and roll out infrastructure to support the use case. Capgemini will also develop and deliver train-the-trainer sessions.


Generative AI for Your Enterprise Proof of Concept.png

Generative AI for Your Enterprise: Proof of Concept: Knowit AB’s proof of concept will represent a cost-effective path to determine if what you’re trying to achieve is feasible and if doing it with AI is worth it. Knowit AB will offer guidance so you can start the AI journey with solid planning and best practices in place.


Infrastructure as Code on Azure - Terraform.png

Infrastructure as Code on Azure – Terraform: In this workshop, SVA will discuss the theoretical and practical basics of HashiCorp’s Terraform, an infrastructure-as-code tool. Participants will learn how to create their first Terraform modules. This service is available only in German.


Mission Planning with Propel on Azure.png

Mission Planning with Propel on Azure: By advising on implementation practices for Microsoft Azure and providing solution prototyping, Propel’s experts will help clients leap the chasm between product strategy and execution.


OpenAI - 2 Day Workshop.png

OpenAI – 2-Day Workshop: Learn how to create and refine prompts and utilize Azure OpenAI Service and the next generation of Azure AI products with CDW’s interactive workshop. By deploying use cases you can quickly differentiate and sharpen your organization’s competitive edge.


OpenAI - 2 Hour Crash Course.png

OpenAI – 2-Hour Crash Course: CDW will introduce you to key concepts of AI/ML and Generative AI so you can understand how to utilize them in real-world applications. Learn about Azure Cognitive Services, Azure Chat Playground, and a host of AI-related topics to improve your business processes.


Optimize Sales, Marketing with ML & Generative AI .png

Optimize Sales, Marketing with ML & Generative AI: In this proof of concept, data scientists from Knowit AB will develop a machine learning model for your business needs. Key sales drivers and sales forecasts will simulate different scenarios, and reports and visualizations will highlight sales and marketing opportunities.



Contact our partners



AI Adoption Acceleration: 2-Week Assessment



AIRRE – AI-Powered Complaint Management Solution



Azure FinOps: 4-Week Assessment



CognoCampaign by Exotel



CognoChatbot by Exotel



ControlUp for Azure Virtual Desktop: 1-Hour Briefing



Data & AI Assessment and Strategy: 2-Week Discovery



Data Platform with Azure Integration Services: 4-Week Fit-Gap Assessment



Optimize Azure with Exquitech’s Managed Service



Exquitech Consultancy for Azure



Guest User Manager by Arvato Systems



Intapp Time & Compliance



Kore.ai XO Platform



KPS Knowledge Management Solution



Mainframe Data to Azure: 2-Week Assessment



Microsoft Sentinel Optimization and Tuning Service



Opening the Door to OpenAI: 3-Week Assessment



Regulatory Data Insights



Trimble Unity AMS



Trimble Vegetation Manager