The Cloud Architects Podcast
The Cloud Architects
A podcast about best practice, guidance, news and cutting edge Microsoft cloud technologies. Interviews with passionate people in the cloud space, hosted by MVPs Nicolas Blank (twitter.com/nicolasblank), Warren du Toit (twitter.com/warrendt) and Chris Goosen (twitter.com/chrisgoosen)
Episodes
Mentioned books

Dec 12, 2023 • 37min
Episode 82: All bad things happen inside the allow rule
Shortly before Thanksgiving, Nic and I had the great pleasure of talking to John Kindervag. I once read about John that he has "forgotten more about technology than most people learn in their careers" and I'm sure after listening to this episode you'll understand why he is referred to as the Godfather of Zero Trust. In this episode we discuss the origins of Zero Trust and some of the history behind it. John also talks about why trying to control the attack surface is a fool's errand and introduces the concept of a protect surface.
With over 25 years of experience as a practitioner and industry analyst, John Kindervag is one of the world’s foremost cybersecurity experts and is known for creating the transformational Zero Trust Model of cybersecurity. At Illumio, John is responsible for driving the adoption of Zero Trust Segmentation through high-touch advocacy and forward-thinking thought leadership. You can connect with John on LinkedIn

Nov 15, 2023 • 46min
Episode 81: Modern Endpoint Management (and dinosaur stories)
We recently had a great conversation with Joe Flynn about modern endpoint management and how the way we manage our devices has changed over the years - we reminisce about the old ways and talk the future of Active Directory. We also discuss management friction, current hybrid work trends and scenarios where technologies like Windows 365 just make sense.
Joe Flynn is a Director and Distinguished Engineer at Insight. With more than 25+ years in the IT industry, Joe loves that technology is constantly changing and providing new challenges — pushing him to learn and absorb more each day. Joe is passionate about technology and the business outcomes that it can provide. You can connect with Joe on LinkedIn (https://www.linkedin.com/in/joeflynn2/)

Oct 25, 2023 • 39min
Episode 80: Cyber Security Awareness
It's Cyber Security Awareness month and in this episode, we talk to Shannon Garcia about the realities of the security industry and have an honest discussion about some of the areas where we could be doing more to raise awareness and educate our organizations, customers and stakeholders. Shannon shares some fundamental guidance, and we discuss how we could and should be learning from highly publicized incidents and breaches that occur far too often these days.
Shannon Garcia is an experienced Senior Leader with a demonstrated history of working in the computer and cybersecurity industry. Skilled in Cybersecurity, Business Management, Program/Project Management, Business Process Improvement, and Building/Leading High Performing Teams. Shannon is a strong and passionate leader focused on helping businesses improve their security posture by maturing their security capabilities and processes.
You can connect with Shannon on LinkedIn (https://www.linkedin.com/in/shannongarcia/) Be sure to check out Shannon's YouTube channel CyberSec Round Table (https://www.youtube.com/@cybersecroundtable)

Sep 14, 2023 • 56min
Episode 79 - It was DNS!
It's ALWAYS DNS! We've all fallen victim to DNS at some point in our careers. In this episode we are once again joined by Robby Pedrica as we discuss DNS architecture and security - we've been deploying DNS the same way for a long time and perhaps it's time we look at our deployments and consider if they could be more secure. We discuss DNS in large enterprise environments and why monitoring DNS traffic is important, but also look at home use and how DNS can be a valuable privacy tool.
Robby recently put together a great blog post on DNS security which is worth a read, you can find [it here - (https://www.xstore.co.za/stuff/2023/06/dns-security-2/)
Robby Pedrica is a IT & Network Security Consultant and Owner of XStore. Robby has been in the IT industry for 33 years, and has focused on the data storage, network security and Linux for the last 23 years. Robby have specializes in firewalling across numerous products, storage virtualization solutions and Linux administration with load-balancing, cluster storage environments and databases amongst others. You can connect with Robby on LinkedIn (https://www.linkedin.com/in/robbypedrica/) Be sure to check out Robby's Blog (https://www.xstore.co.za/stuff/)

Aug 9, 2023 • 1h 1min
Episode 78: The Modern Admin
Same product, new name - RIP Azure AD/long live Entra ID! In this episode we're joined by long-time friend of the show Michael Van Horenbeeck to discuss the recent Entra related announcements and Microsoft's expansion into Security Service Edge (SSE) with two new products – Microsoft Entra Internet Access and Microsoft Entra Private Access. We've all heard the TLAs PIM, PAW, and talk of Tier0 configurations, but what are these and how are these relevant to the modern admin? Should we be evolving the way we manage our environments or is it just a matter of buying new technologies to hopefully keep us ahead of bad actors? Michael shares his thoughts.
Michael Van Horenbeeck specializes in a variety of products and services from the Microsoft 365 product stack, more specifically within Enterprise Mobility + Security, Azure Active Directory, Office 365, etc. He is one of the handful experts in the world to hold both the Microsoft Certified Solutions Masters for Messaging certification and the Office Apps & Services MVP award at the same time. Over the last 18 years, he has worked with various technologies and solutions from different vendors, mainly focusing in the area of Security, Messaging, Collaboration and Intelligent Communications. He works with customers around the globe, helping them to design, implement, migrate, consolidate and secure various solutions and services based on Microsoft's M365 offerings. You can also find him speaking at several international conferences such as Microsoft Ignite, TechSummits, Mobile Workplace Conference. Follow Michael on Twitter (https://twitter.com/vanhybrid) also be sure to check out Microsoft 365 Security For IT Pros here (https://m365securitybook.com)

Jul 12, 2023 • 45min
Episode 77: Open-source
In this episode we're joined by long-time friend Robby Pedrica as we talk about Open-source software. We asked Robby about Open-source technologies in the enterprise and discussed the history, ins and outs of using Open-source projects in your environment.
Robby Pedrica is a IT & Network Security Consultant and Owner of XStore. Robby has been in the IT industry for 33 years, and has focused on the data storage, network security and Linux for the last 23 years. Robby have specializes in firewalling across numerous products, storage virtualization solutions and Linux administration with load-balancing, cluster storage environments and databases amongst others. You can connect with Robby on LinkedIn (https://www.linkedin.com/in/robbypedrica/) Be sure to check out Robby's Blog (https://www.xstore.co.za/stuff/)

Jun 22, 2023 • 42min
Episode 76: Insiders
What is insider risk and how does it differ from an insider threat? Did you know that these are not always bad actors or malicious acts? We were curios about insider risk management, insider threat detection and everything that goes along with it, so we asked Zach Luze to unpack this vast topic for us.
Zach Luze is the Microsoft Cloud and Data Security Advisory Lead at Kudelski Security. Zach is an experienced information security professional with a passion for data security and insider risk management. You can connect with Zach on LinkedIn (https://www.linkedin.com/in/zachluze/)

May 29, 2023 • 51min
Episode 75: Explaining AI to your parents
If you were to open your Twitter/LinkedIn/Mastodon feed at the moment, it is undoubtedly filled with AI posts - while some of these might be interesting or even somewhat useful, the majority likely include the words "RIP" and some profession or job function. There is so much AI FUD around right now and we wanted to find out if the hype was worth listening to. Is Skynet going to take over and put us all out of a job? We thought we'd ask an expert and that's exactly what we did when we recently talked to AI MVP Akanksha Malik.
Akanksha Malik is a Data Consultant, a Microsoft AI MVP and an international speaker. After studying Financial Maths and Actuarial Science at UCC, Ireland, she realised she wanted to work with people as well as numbers. As a consultant, she works with clients to help them solve problems by making more informed decisions with data.
Akanksha is a firm believer of diversity and inclusivity. She loves machine learning, and that it is becoming more accessible to everyone. She is an avid advocate for women in STEM and is currently the network director of Women Who Code Melbourne and advisory board member for Tech Diversity Lab. You can follow Akanksha on Twitter (https://twitter.com/akankshamalik96)
Be sure to check out some of her projects here:
Paths Uncovered - (https://www.pathsuncovered.com)
Global AI - The Podcast - (https://twitter.com/GlobalAIPodcast)
Women Who Code Melbourne - (https://www.womenwhocode.com/melbourne)

May 16, 2023 • 57min
Episode 74: Llama Cam
In this episode we geek out about home automation, Azure and training cognitive services to recognize llamas. Wait.. sound weird? Maybe, but we had a blast talking to MVP Lars Klint about life on his farm in the high country of Victoria in Australia and how he uses technology to automate (and amuse)
Be sure to check out the following links:
* Follow the Llama Drama here (https://llamacam.com.au)
* LarsKlintTech YouTube Channel (https://www.youtube.com/@LarsKlintTech)
* Microsoft Azure in Action (https://www.manning.com/books/microsoft-azure-in-action)
Lars Klint is a Senior Developer Advocate at Pluralsight and an Azure instructor with A Cloud Guru. In addition to being a Microsoft MVP and community leader, Lars is a published author, aspiring Microsoft Azure expert and part time classic car collector. You can connect with Lars on Twitter (https://twitter.com/larsklint)

May 1, 2023 • 38min
Episode 73: Persistently Vulnerable
Exchange Server 2013 officially reached its end of support on April 11, 2023. What exactly does end of support mean? What should you do if your organization still relies on Exchange 2013 for email? In this episode I'm joined by Microsoft MVP Jeff Guillet, and we attempt to answer these questions and more. We also discuss the recent Microsoft announcement to throttle and block email from persistently vulnerable Exchange servers to Exchange Online (https://techcommunity.microsoft.com/t5/exchange-team-blog/throttling-and-blocking-email-from-persistently-vulnerable/ba-p/3762078?WT.mc_id=M365-MVP-9501)
Be sure to check out the following resources:
Exchange 2013 end of support roadmap (https://learn.microsoft.com/en-us/microsoft-365/enterprise/exchange-2013-end-of-support?view=o365-worldwide)
How to Setup Exchange Management Tools in Environments without Exchange Server (https://blog.expta.com/2022/10/how-to-setup-exchange-management-tools.html)
A New Tool to Manage Exchange-related Attributes Without Exchange Server (https://practical365.com/a-new-tool-to-manage-exchange-related-attributes-without-exchange-server/)
Jeff Guillet is a Microsoft Exchange Certified Solutions Master (MCSM), Office Apps & Services MVP and the founder and CEO of EXPTA Consulting. He works primarily with Microsoft products (Exchange, Office 365, Lync Server, Windows Server, Active Directory, Hyper-V, etc.) for mid-large customers (5,000+ users) and is a published author, speaker and technical editor. You can connect with Jeff on Twitter (https://twitter.com/expta) and check out his blog (https://blog.expta.com)


