network-security-design

Guide Azure network security design with zero trust and private endpoints.

1|Updated Apr 19, 2026
One-click install
npx skills add https://github.com/SandboxServers/github-copilot-agents --skill network-security-design
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: network-security-design
Source: https://github.com/SandboxServers/github-copilot-agents/tree/main/skills/network-security-design.skill
Command: npx skills add https://github.com/SandboxServers/github-copilot-agents --skill network-security-design

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides comprehensive guidance for designing secure Azure networks, helping you implement best practices and design patterns for network security.

Core Features & Use Cases

  • Private Endpoint Design: Configure secure private endpoints for PaaS services.
  • NSG/ASG Configuration: Design and apply network security groups and application security groups.
  • Zero Trust Networking: Implement zero trust principles for network traffic control.
  • WAF and Firewall Configuration: Secure internet-facing applications with Web Application Firewalls and Azure Firewalls.
  • Common Security Findings: Identify and mitigate common security issues.
  • Use Case: As an IT security professional, you can use this Skill to ensure that your Azure network is designed to adhere to security standards and reduce the risk of data breaches.

Quick Start

Use the network-security-design skill to review the security configuration of your Azure virtual network.

Frequently Asked Questions about network-security-design

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure private endpoints for Azure PaaS services?

To configure private endpoints for Azure PaaS services, apply industry-standard design patterns that secure private networking by mapping private IP addresses to PaaS resources. This ensures secure cloud-based services and mitigates security risks within Azure workloads.

What is the best way to implement zero trust networking in Azure?

Implementing zero trust networking in Azure requires applying industry-standard best practices for network traffic control. This involves configuring NSG/ASG rules and Azure Firewalls to explicitly verify traffic, ensuring compliance and mitigating security risks in Azure workloads.

How do I design NSG and ASG rules for securing Azure virtual networks?

Designing NSG and ASG rules for securing Azure virtual networks involves applying best practices to group workloads and filter traffic. This Skill guides the configuration of network security groups and application security groups to ensure adherence to security standards.

Can I use Azure Firewall and WAF to secure internet-facing applications?

Yes, you can use Azure Firewall and WAF to secure internet-facing applications by applying expert design patterns. This Skill guides the configuration of Web Application Firewalls and Azure Firewalls to mitigate common security risks and protect Azure workloads.

How do I identify and mitigate common Azure network security findings?

To identify and mitigate common Azure network security findings, review your virtual network security configuration using established best practices. This Skill helps IT security professionals spot common security issues and apply zero trust design principles to reduce data breach risks.

Related Skills