Ctrl+Alt+Azure

This week we take a look at Microsoft Security Exposure Management, and what has changed since the last time we looked at it. Among these findings we can see containment capabilities for AI agents, and several capabilities converging into MSEM. Join us for a fun discussion on the latest and great security capabilities!
(00:00) - Intro and catching up.
(03:42) - Show content starts.
Show links
- Secure Now
- Containment strategies for AI in Secure Now
- What's new in Microsoft Security Exposure Management
- Overview of attack paths
- Predefined classifications for critical assets
- Agentic code security overview (Codename MDASH)
- AI-powered defense for an AI-accelerated threat landscape
- Our earlier take: episode 231

- Give us feedback!

This week we focus on licensing with Microsoft 365 E7. What's included in the bundle, and which ones are relevant and when? We reflect on the upgrade path from Microsoft 365 E5, as well as E3 + Defender Suite, and reflect on the options and pricing.
(00:00) - Intro and catching up.
(02:50) - Show content starts.
Show links
- Microsoft 365 E7 announcement
- Microsoft Agent 365 overview
- Microsoft licensing FAQ, Agent 365
- Purview data security and compliance for Agent 365
- Independent E7 licensing analysis (SAMexpert)
- Our earlier take on Agent 365 and Entra Agent ID: Episode 336

- Give us feedback!

This week we take a look at Microsoft Global Secure Access (GSA). It's been a few years since it was announced, and it's time to refresh our thinking on what GSA is today, how companies can use it, and what a rollout in 2026 would look like. Join us in discussing GPUs, VPNs, and what a delivery project would include!
(00:00) - Intro and catching up.
(03:56) - Show content starts.
Show links
- Global Secure Access deployment guide
- Private Access deployment plan
- Global Secure Access operations guide
- Enable Intelligent Local Access
- Configure Private Access for Active Directory domain controllers (preview)
- What is Global Secure Access (licensing overview)
- Break-glass script for compliant network policies
- Our previous take: Episode 201

- Give us feedback!

In this week's episode, we look at recent Microsoft Tech updates. By popular request, we're expanding our scope beyond Azure to include Microsoft 365, Power Platform, and related Microsoft platforms and capabilities. What's new? What's interesting? What's retiring?
(00:00) - Intro and catching up.
(02:18) - Show content starts.
Show links
- Microsoft Entra Backup and Recovery
- Agent identities in Conditional Access policies
- Project Perception and Microsoft Learn documentation
- Azure Firewall Explicit Proxy
- Microsoft Agent Framework – multi-agent orchestration SDK (GA)
- Public Preview: AI Gateway in APIM
- Public Preview: Protect sensitive generative AI telemetry in Application Insights
- Foundational CSPM becomes opt-in for new subscriptions

- Give us feedback!

Azure Front Door just got programmable. Edge actions run your own JavaScript at Microsoft's edge, so A/B splits, token checks and origin routing happen before requests hit your backend. We cover what they do, where static rules run out, how they compare to Cloudflare Workers, and how to try them.
(00:00) - Intro and catching up.
(03:56) - Show content starts.
Show links
- Edge Actions - Azure Front Door | Microsoft Learn 
- Introducing Azure Front Door edge actions | Microsoft Community Hub
- Give us feedback!