https://blue-sky-041ab6803.azurestaticapps.net/Azure, Mikrotik, powershell, scripts, openHAB, SmartHome. 2026-06-26T09:35:00+02:00 Gudszent Otto https://blue-sky-041ab6803.azurestaticapps.net/ Jekyll © 2026 Gudszent Otto /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-06-25T14:10:00+02:00 2026-06-10T13:28:01+02:00 https://blue-sky-041ab6803.azurestaticapps.net/posts/Speaking-ExpertsLiveAustria2026/ gudszent

Demystifying Global Secure Access: VPN-less Security for the Modern Era I will present this session at Experts Live Austria Conference 2026 on June 25, 2026. Legacy VPNs are no longer just a performance bottleneck; they are a primary target for lateral movement. Global Secure Access redefines the perimeter by shifting security from the network to the identity, helping organizations build a pr...

2026-06-16T20:00:00+02:00 2026-06-16T20:00:00+02:00 https://blue-sky-041ab6803.azurestaticapps.net/posts/AVD-reregister-hostpools/ gudszent

One of the more confusing Azure Virtual Desktop issues is when a session host drops out of the host pool and refuses to register again. ![AVD](/assets\img\2026-06-16-AVD-reregister-hostpools\01.png The error usually looks like this: WVD-Agent service is being stopped: NAME_ALREADY_REGISTERED This VM needs to be properly registered in order to participate in the deployment At first glance t...

2026-06-15T14:10:00+02:00 2026-06-15T14:10:00+02:00 https://blue-sky-041ab6803.azurestaticapps.net/posts/Prevent-DDos-Protection/ gudszent

Azure DDoS Protection can be useful, but in many environments it is simply an unnecessary extra cost. If nobody should enable it, then the simplest solution is Azure Policy with ‘deny’. In this case I want to block two things: creation of DDoS Protection plans enabling DDoS Protection on VNets Policy 1: Deny Azure DDoS Protection plan creation This policy blocks creation of Microsoft....

2026-06-09T08:00:00+02:00 2026-06-10T17:03:56+02:00 https://blue-sky-041ab6803.azurestaticapps.net/posts/umi-federate-spn/ gudszent

If I had to pick the part I hate most about SPN-based integrations, it would be the secret. Rotation is consistently problematic: applications pick up the wrong version, keep using a cached old one, or force service owners into a lifecycle that is either too short or too long. Better to skip it entirely. If you want an Azure-hosted workload to access a downstream API without storing a client se...

2026-04-29T08:00:00+02:00 2026-06-10T13:39:01+02:00 https://blue-sky-041ab6803.azurestaticapps.net/posts/Speaking-BSidesBUD-2026/ gudszent

How Can I Steal Your Data with Azure Private Endpoints I will present this session at BSidesBUD on April 29, 2026. BSidesBUD is an international IT security conference, which makes it the right place to look at Azure Private Endpoints from an attacker and defender perspective at the same time. Private Endpoints are often seen as a simple hardening feature, but in real environments their secur...