Azure secure EXPRESSROUTE configuration

[rdaniels]

Hi everyone.  I'm Rodney Daniels (daniels.rodney@gmail.com) and I'm trying to get a workable idea, template or basic config to successfully implement a secure organization on premise to Microsoft cloud exchange connection for the first time.  I have briefly referenced the excerpt below from Microsoft, but I wanted to hear from someone or an expert who has already successfully accomplished this type of configuration to know what the naissances are and some of the possible pitfalls?  Please lend your experiences to help.  Thanks... 

https://learn.microsoft.com/en-us/azure/expressroute/secure-expressroute

[nkeaton]

@rdaniels   Unfortunately I really don't think that you will get the answer here.  ISC2's cloud certification is vendor neutral.  I have 3 cloud certifications, none vendor specific, from 3 different organizations.  I am considered a cloud expert but do not work with specific products at my level.  Best wishes.  

[rdaniels]

Thanks for the reply. That is kind of what I thought but I wanted to test
the networking group to see what the outcome would be.

[nkeaton]

@rdaniels Someone could surprise both of us. Just didn’t want to leave you unanswered.

[dcontesti]

Not sure if this will help but, like any system/configuration, start with the basics.

1. Understand your environment and establish a baseline,  This includes a network topology.

2. Develop a standardized, security lifecycle (ensure it is maintainable and managed)

3. Understand the sensitivity of your data (develop a classification scheme .. the author recommends a three tier system for CIA).

4. Develop and understand Use Cases

5. Understand the security roles needed

I know it sounds pretty basic but many people dive in without full understanding.

Hope it helps

OTHERS?

d

[rdaniels]

Thanks dcontesti. I agree that the basic foundations shouldn't be
overlooked. If you dive in to fast and get confused, it usually leads you
right back to exploring the basics first,

Rodney Daniels