Azure Marketplace映像的安全建议 [英] Security Recommendations for Azure Marketplace Images

问题描述

我考虑在基于Windows Server 2016，RHEL7.6和SUSE15的Azure市场上发布VM映像.

I consider publishing a VM image on the Azure marketplace based on Windows Server 2016, RHEL7.6, and SUSE15.

当我修改VM映像的防火墙配置时，我确认了以下策略(https://docs.microsoft.com/zh-cn/azure/security/security-security-recommendations-azure-marketplace-images).

When I modify a firewall configuration of the VM image, I confirmed the following policies(https://docs.microsoft.com/en-us/azure/security/security-recommendations-azure-marketplace-images).

在策略中的解释如下.
除非应用程序在功能上依赖防火墙规则，例如防火墙设备，否则防火墙规则将被禁用."

另一方面，在从SQL Server Windows映像和SQL Server RHEL映像部署的Azure虚拟机中启用了防火墙规则.  

在Azure市场的VM映像中建议使用哪种防火墙配置?

It is explained in the policy as follows.
"Firewall rules are disabled, unless application functionally relies on them, such as a firewall appliance."

On the other hand, firewall rules are enabled in Azure virtual machine deployed from SQL Server Windows image and SQL Server RHEL image.  

Which one of those firewall configuration are recommended in the VM image on the Azure marketplace ?

推荐答案

Ryu Matsui，

Hi Ryu Matsui,

强烈建议您遵循 除非您有功能需要在VM映像中启用FW，否则防火墙配置的Azure Marketplace安全准则.

Strongly recommend you follow the Azure Marketplace security guidelines for firewall configuration unless you have a functional need to enabled FW in your VM image.

始终最好遵守Azure Marketplace建议，因为这是将在其上发布VM映像的平台:)

It's always best to adhere to the  Azure Marketplace recommendations since this is the platform on which your VM Image will be published :)

干杯，

这篇关于Azure Marketplace映像的安全建议的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！