Copilot Podcast: Copilot for Security Integration with Azure WAF and Azure Firewall
In episode 32 of the “Copilot Podcast,” AI Expert Aaron Back explains how the integration of Microsoft Copilot into the Azure network assists security professionals.
This episode is sponsored by the AI Summit Preconference, a part of the Community Summit North America 2024 experience, taking place on October 13th in San Antonio, Texas. The full-day preconference will feature keynotes, panel discussions, tutorials, fireside chats, use-case analysis, innovation profiles, and more. Register for the AI Summit Preconference now.
Highlights
01:09 — Microsoft has recently announced the integration of Copilot for Security into the Azure Web Application Firewall (WAF) and Azure Firewall.
02:13 — The goal of this integration is to assist security professionals with logging security detections and turning those into actionable insights. There are a few key ways Copilot for Security is assisting Azure WAF:
- Provides contextual analysis
- Investigates security threats
- Delivers explanations in natural language
04:12 — Azure Firewall is intended to intercept and block malicious traffic using an intrusion detection and prevention system (IDPS). However, when analysts need to perform deeper investigations into the threats that Azure firewall catches using this feature, they’ve got to do all this manually.
05:00 — There are three unique areas that Copilot in Azure Firewall can assist:
- Investigation starts with selecting a specific Azure Firewall to examine the intercepted threat
- Providing additional context around the threat
- Correlating threats across different environments
07:02 — In closing, Aaron notes that Copilot is removing “guesswork” that’s involved with manually identifying threats, which is helping security professionals “turn that output into action.”
Stream the audio version of this episode here:
