Notes from Migration Guide for Windows Server

The 15-paged Migration Guide for Windows Server [PDF] is a good read especially if you're using older versions of Windows Server & SQL Server & plan to migrate to Azure

Excerpts -

Microsoft helps protect 2008 workloads you move to Azure with free Extended Security Updates for 3 more years after end of support making it possible to counter sophisticated cyber threats with Azure’s secure cloud foundation and benefit from more than 70 compliance certifications.

Two factors drive migration risk: business impact and complexity.
• Score business impact by assessing how important the workload is to your business operations.
• Score complexity by evaluating how complex the application is and how well your team understands it.

A critical workload will score a higher risk even if it’s simple, whereas a more complex but less critical workload might end up with a lower risk score—and thus might be a better candidate for early migration.

Many key Microsoft partners are moving their solutions natively to Azure. SAP HANA, Adobe, Citrix, and other partners offer Azure-based solutions that combine the power of the Azure cloud with the functionalities unique to these applications. The Azure Marketplace offers hundreds of Azure-native solutions covering a broad range of business and technology applications

To protect your data and networks, Microsoft changed the set of protocols enabled by default and the set of services installed and run by default. Both changes help reduce the attack surface of your network and protect against well-known threats. For example, Microsoft has deprecated the use of SMB version 1 and TLS 1.0 as basic protocols, replacing them with newer and more robust versions.

When you migrate applications to Azure, you can continue to use your security information and event management (SIEM) software, combining cloud and on-premises security information into your existing system of monitoring and control. You can also take advantage of Azure SEIM and other security capabilities, including Azure Sentinel, an artificial intelligence-based SEIM, Azure Advanced Threat Protection for network security and Azure Key Vault for secure storage of application credentials and data. Take time to evaluate these technologies for use with your onpremises, cloud, and hybrid applications, and networks

Comments