You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/ddos-protection-partner-onboarding.md
+20-19Lines changed: 20 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,20 +17,20 @@ Distributed denial of service (DDoS) attacks are one of the top availability and
17
17
18
18
Azure DDoS Protection provides countermeasures against the most sophisticated DDoS threats, leveraging the global scale. The service provides enhanced DDoS mitigation capabilities for applications and resources deployed in virtual networks.
19
19
20
-
Technology partners can protect their customer’s resources natively with Azure DDoS Protection Standard to address the availability and reliability concerns due to DDoS attacks.
20
+
Technology partners can protect their customers' resources natively with Azure DDoS Protection Standard to address the availability and reliability concerns due to DDoS attacks.
21
21
22
22
## Introduction to Azure DDoS Protection Standard
23
-
Azure DDoS Protection Standard provides enhanced DDoS mitigation capabilities against Layer 3 and Layer 4 DDoS attacks. Following are the key features of DDoS Protection Standard service.
23
+
Azure DDoS Protection Standard provides enhanced DDoS mitigation capabilities against Layer 3 and Layer 4 DDoS attacks. The following are the key features of DDoS Protection Standard service.
24
24
25
-
### Adaptive realtime tuning
26
-
For every protected application, Azure DDoS Protection Standard automatically tunes the DDoS mitigation policy thresholds based on application’s traffic profile patterns. The service accomplishes this customization by using two insights:
25
+
### Adaptive real-time tuning
26
+
For every protected application, Azure DDoS Protection Standard automatically tunes the DDoS mitigation policy thresholds based on the application’s traffic profile patterns. The service accomplishes this customization by using two insights:
27
27
28
28
- Automatic learning of per-customer (per-IP) traffic patterns for Layer 3 and 4.
29
29
- Minimizing false positives, considering that the scale of Azure allows it to absorb a significant amount of traffic.
30
30
31
31

32
32
33
-
### Attack analytics, telemetry, monitoring and alerting
33
+
### Attack analytics, telemetry, monitoring, and alerting
34
34
Azure DDoS Protection identifies and mitigates DDoS attacks without any user intervention.
35
35
36
36
- If the protected resource is in the subscription covered under Azure Security Center, DDoS Protection Standard automatically sends an alert to Security Center whenever a DDoS attack is detected and mitigated against the protected application.
@@ -43,29 +43,29 @@ Azure DDoS Protection identifies and mitigates DDoS attacks without any user int
43
43
DDoS Protection Standard customers have access to [Rapid Response team](https://azure.microsoft.com/blog/ddos-protection-attack-analytics-rapid-response/) during an active attack. DRR can help with attack investigation, custom mitigations during an attack, and post-attack analysis.
44
44
45
45
### SLA guarantee and cost protection
46
-
DDoS Protection Standard service is covered by 99.99% SLA, and cost protection provides resource credits for scale out during a documented attack. For more information, see [SLA for Azure DDoS Protection](https://azure.microsoft.com/support/legal/sla/ddos-protection/v1_0/).
46
+
DDoS Protection Standard service is covered by a 99.99% SLA, and cost protection provides resource credits for scale out during a documented attack. For more information, see [SLA for Azure DDoS Protection](https://azure.microsoft.com/support/legal/sla/ddos-protection/v1_0/).
47
47
48
48
## Featured partner scenarios
49
49
The following are key benefits you can derive by integrating with the Azure DDoS Protection Standard:
50
50
51
-
-Partner’s offered service (load balancer, web application firewall, firewall, etc.) to their customers are automatically protected (white labeled) by Azure DDoS Protection Standard in the backend.
51
+
-Partners' offered services (load balancer, web application firewall, firewall, etc.) to their customers are automatically protected (white labeled) by Azure DDoS Protection Standard in the back end.
52
52
- Partners have access to Azure DDoS Protection Standard attack analytics and telemetry that they can integrate with their own products, offering a unified customer experience.
53
-
- Partners have access to DDoS rapid response support even in absence of Azure rapid response, for DDoS related issues.
54
-
-Partner’s protected application is backed by DDoS SLA guarantee and cost protection in an event of DDoS attacks.
53
+
- Partners have access to DDoS rapid response support even in the absence of Azure rapid response, for DDoS related issues.
54
+
-Partners' protected applications are backed by a DDoS SLA guarantee and cost protection in the event of DDoS attacks.
55
55
56
56
## Technical integration overview
57
-
Azure DDoS Protection Standard partnering opportunities are made available via Azure portal, APIs, CLI/PS.
57
+
Azure DDoS Protection Standard partnering opportunities are made available via Azure portal, APIs, and CLI/PS.
58
58
59
-
### How to integrate with DDoS Protection Standard
60
-
Following steps are required for partners to configure integration with Azure DDoS Protection Standard:
59
+
### Integrate with DDoS Protection Standard
60
+
The following steps are required for partners to configure integration with Azure DDoS Protection Standard:
61
61
1. Create a DDoS Protection Plan in your desired (partner) subscription. For step-by-step instructions, see [Create a DDoS Standard Protection plan](manage-ddos-protection.md#create-a-ddos-protection-plan).
62
62
> [!NOTE]
63
63
> Only 1 DDoS Protection Plan needs to be created for a given tenant.
64
-
2. Deploy a service with public endpoint in your (partner) subscriptions such as - load balancer, firewalls, web application firewall.
64
+
2. Deploy a service with public endpoint in your (partner) subscriptions, such as load balancer, firewalls, and web application firewall.
65
65
3. Enable Azure DDoS Protection Standard on the virtual network of the service that has public endpoints using DDoS Protection Plan created in the first step. For stpe-by-step instructions, see [Enable DDoS Standard Protection plan](manage-ddos-protection.md#enable-ddos-for-an-existing-virtual-network)
66
66
> [!IMPORTANT]
67
-
> Once Azure DDoS Protection Standard is enabled on a virtual network, all public IPs within that virtual network are automatically protected. The origin of these public IPs can either be within Azure (client subscription), or, outside of Azure.
68
-
4. Optionally, integrate Azure DDoS Protection Standard telemetry and attack analytics in your applicationspecific customerfacing dashboard. For more information about using telemetry, see [Use DDoS Protection telemetry](manage-ddos-protection.md#use-ddos-protection-telemetry). For more information about configuring attack analytics, see [Configure DDoS attack analytics](manage-ddos-protection.md#configure-ddos-attack-analytics)
67
+
> After Azure DDoS Protection Standard is enabled on a virtual network, all public IPs within that virtual network are automatically protected. The origin of these public IPs can be either within Azure (client subscription) or outside of Azure.
68
+
4. Optionally, integrate Azure DDoS Protection Standard telemetry and attack analytics in your application-specific customer-facing dashboard. For more information about using telemetry, see [Use DDoS Protection telemetry](manage-ddos-protection.md#use-ddos-protection-telemetry). For more information about configuring attack analytics, see [Configure DDoS attack analytics](manage-ddos-protection.md#configure-ddos-attack-analytics)
69
69
70
70
### Onboarding guides and technical documentation
71
71
@@ -74,14 +74,15 @@ Following steps are required for partners to configure integration with Azure DD
74
74
-[Azure DDoS Protection API reference](https://docs.microsoft.com/rest/api/virtualnetwork/ddosprotectionplans)
75
75
-[Azure virtual network API reference](https://docs.microsoft.com/rest/api/virtualnetwork/virtualnetworks)
76
76
77
-
### Getting help
77
+
### Get help
78
78
79
-
- If you have questions on application, service, or product integrations with Azure DDoS Protection Standard, reach out to the [Azure security community](https://techcommunity.microsoft.com/t5/security-identity/bd-p/Azure-Security).
79
+
- If you have questions about application, service, or product integrations with Azure DDoS Protection Standard, reach out to the [Azure security community](https://techcommunity.microsoft.com/t5/security-identity/bd-p/Azure-Security).
80
80
- Follow discussions on [Stack Overflow](https://stackoverflow.com/tags/azure-ddos/).
81
81
82
-
### Getting to market
82
+
### Get to market
83
83
84
-
- The primary program for partnering with Microsoft is the [Microsoft Partner Network](https://partner.microsoft.com/) – Microsoft Graph Security integrations fall into the [MPN Independent Software Vendor (ISV)](https://partner.microsoft.com/saas-solution-guide) track.
84
+
- The primary program for partnering with Microsoft is the [Microsoft Partner Network](https://partner.microsoft.com/).
85
+
– Microsoft Graph Security integrations fall into the [MPN Independent Software Vendor (ISV)](https://partner.microsoft.com/saas-solution-guide) track.
85
86
-[Microsoft Intelligent Security Association](https://www.microsoft.com/security/business/intelligent-security-association?rtc=1) is the program specifically for Microsoft Security Partners to help enrich your security products and improve customer discoverability of your integrations to Microsoft Security products.
0 commit comments