The castle-and-moat model of network security no longer holds up in a world of remote work, SaaS sprawl, and multi-cloud infrastructure. This session reframes network security around the Zero Trust principle of "never trust, always verify," and shows attendees exactly how to implement it in Azure.

We'll start with the architectural building blocks — Network Security Groups, Application Security Groups, and Azure Firewall Policies — and show how to use them for true micro-segmentation rather than broad, permissive rules. From there, we'll layer in identity signals from Azure AD Conditional Access, showing how network access decisions can become dynamic and context-aware rather than static. We'll also cover Just-in-Time VM access through Microsoft Defender for Cloud, eliminating standing access as an attack vector.

The session closes with a demo.