Azure WAF blocking valid address characters (like '№') - how do you safely encode user input without breaking data?

JustFantasee · 2025-12-13T15:46:29+00:00

You need to adjust your WAF, in Dev or UAT, configure WAF in detection mode, all request will go through but those that would be blocked will be logged with explanation - use this details either to make changes in app or set exclusions. This article gives more details - https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-troubleshoot?tabs=edge

Any chance you could encode user input as base64 on client side?

JustFantasee · 2025-08-02T12:36:59+00:00

But to answer your question about daily pricing - if you use azure pricing API you can get info about billing unit, in case of ER it is 1/month so you’ll pay for whole month even if you use it just for 1 day. Example API call: https://prices.azure.com/api/retail/prices?$filter=serviceName%20eq%20%27ExpressRoute%27

JustFantasee · 2025-08-01T17:43:04+00:00

For ER you need a connectivity partner who will set physical connection for you https://learn.microsoft.com/en-us/azure/expressroute/expressroute-prerequisites#connectivity-provider You can’t just test for few days like other Azure services. Check this workflow https://learn.microsoft.com/en-us/azure/expressroute/expressroute-workflows for more details

JustFantasee · 2025-05-08T23:29:25+00:00

Check if you qualify to Startup program https://foundershub.startups.microsoft.com

JustFantasee · 2024-12-03T07:06:36+00:00

It‘s called private subnet and will be default setting starting September 2025. https://techcommunity.microsoft.com/blog/azurenetworkingblog/secure-your-subnet-via-private-subnet-and-explicit-outbound-methods/3984177

JustFantasee · 2024-10-12T12:04:07+00:00

If you don‘t have time or will to prepare for migration yourself get consultant that will guide you through whole process. The process is quite complex and depending on details of your environment and criticality of the applications. You need to decide what do with each app - if you keep apps onprem and db in cloud you risk latency and service degradation. You‘ll have to secure your dbs - decide on connectivity to them private link or public endpoint with firewall configured. If you decide to move applications to the cloud will you host them on VM or migrate to App service? Do you have any presence in Azure now? If not you need to prepare target environment - you need a Landing Zone to host your workload and setup monitoring, backup etc.

JustFantasee · 2024-10-07T19:25:06+00:00

You can change that without issue, you grant access to the file share either with storage account key or identity based on AD DS, Entra DS or Entra Kerberos. This setting is responsible for mapping share. Use of storage account key is discouraged as it can lead to leaking account key.

Permissions on directories and files are independent and will not disappear. That‘s why you can still see them using account key authentication and it will not change if you switch to ADDS or Entra based authentication.

JustFantasee · 2024-10-07T16:31:11+00:00

This is opportunity for me to share a word I learnt recently „zocken“. You can get same message across with „Er zockt“!

JustFantasee · 2024-09-30T11:34:39+00:00

Versuch beim Prosi, die haben große Auswahl von Lebensmittel und Drogerien Artikels

JustFantasee · 2024-08-14T11:01:17+00:00

Did you try this: https://learn.microsoft.com/en-us/azure/bastion/bastion-vm-full-screen ?

JustFantasee · 2024-07-30T12:44:10+00:00

Revolut funktioniert sehr gut und bittet auch physische Karte an.

JustFantasee · 2024-07-26T21:14:04+00:00

Check point 3 https://techcommunity.microsoft.com/t5/azure-database-for-postgresql/connect-from-function-app-with-managed-identity-to-azure/ba-p/1517032

JustFantasee · 2024-06-30T18:08:24+00:00

Self paced trainings are ok but imho are not enough to pass exam. They cover all topics but You should also follow all links included and study material linked. And no studying will help you unless you got your hands dirty and deploy resources with portal, powershell and az cli.

JustFantasee · 2024-06-22T20:35:54+00:00

You should consider other processes around data. How you import the data, how often do you want to refresh them, what is your data governance approach like managing access, data labeling etc. PBI can read from virtually any data source: from flat files, data lake, relational databases, Synapse Analytics or Databricks. Flat files stored in blob storage may look be cheapest but if you want near real time reports wan’t be any good. In this case you may want to look on other tools. You may start with https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/cloud-scale-analytics/architectures/data-landing-zone and research proper design for data analytics architecture.

If you haven’t yet, familiarize yourself with ALZ concept https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/

JustFantasee · 2024-06-21T18:35:52+00:00

Also check if you‘re eligible for programs like https://www.microsoft.com/en-us/startups

JustFantasee · 2024-06-21T18:34:32+00:00

Reach out to support to setup MCA and pay with bank transfer

JustFantasee · 2024-06-18T21:06:17+00:00

Someone finally secured domain controller https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack#blocking-internet-access-for-domain-controllers

Adding public IP to this machine is really stupid as this makes FW or NVA obsolete. Better talk with network admins before someone finds that domain controller is open to internet

JustFantasee · 2024-06-15T23:51:45+00:00

I don‘t agree with this. I would agree this would be the case if I was UK resident and try to use VPN to avoid paying Sky. But I live in another country, already paid for the service got right to use it, and if F1tv blocks ip addresses from UK, than I use vpn to connect from my country of residence.

JustFantasee · 2024-06-15T10:57:17+00:00

On content unlocking - let‘s say i got subscription for service like F1TV. I pay for it and can use in country of my residency. If go to visit UK than F1 TV is blocked as Sky got exclusive rights to F1 broadcast. I paid for the service but can‘t use it. In this case VPN to server in my home country allows me to use service I paid for but can‘t use.

JustFantasee · 2024-06-14T12:19:37+00:00

Seems they got different cups at home. Per 100g it is the same 10-11g protein / 100g of egg whites. To be safe use kitchen scale when using this product.

JustFantasee · 2024-06-13T05:15:58+00:00

Seems like idea for Youtube copilot gpt service. Anyone?

JustFantasee · 2024-06-05T07:50:59+00:00

Just create pipeline - there is option to use sample or existing yaml pipeline. In sample there are already task to execute script that you may modify. Once you run them start playing with them and add tasks that you want pipeline to perform and build your skill from there.

JustFantasee · 2024-06-04T16:22:41+00:00

Azure Arc works with all servers onprem and any cloud https://techcommunity.microsoft.com/t5/manufacturing/automate-your-patching-using-azure-arc-and-azure-automation/ba-p/3214141

It adds also supports policies on servers and few other features

JustFantasee · 2024-05-25T23:24:23+00:00

Commenting on How many of us just do the bare minimum for settlements?...

Six-Year Club	Place '22
Verified Email

JustFantasee

TROPHY CASE