Basically, as an extension of the local Active Directory, the institution positioned an additional domain controller on Azure, and created a secure network infrastructure with S2S VPN to securely talk workloads and solutions in data centers on Azure. For backup and disaster recovery scenarios, they preferred Azure Backup and Azure Site Recovery solutions in addition to their own data centers. Thus, the institution has an infrastructure that is both easy to manage and low cost.

The advantages of TYH Tekstil, which has completed the necessary configurations for recording and monitoring performance, security and event logs in cloud and local infrastructure resources with Azure Monitor services, are briefly as follows;

By using the Azure Monitor solution and Log Analytics infrastructure on the log analysis side, the institution gained scalability and had the flexibility to produce the desired report. Since Microsoft uses many different cloud services, TYH Tekstil creates many dashboards, from business process solutions such as OneDrive for Business to identity and access solutions such as Azure Information Protection by sending their logs to the cloud, such as usage, analysis and threat detection on different cloud services. It brings agility and insight to its operations by using it frequently in their daily workflow.
With the Azure Automation service, the ability to automate the status of different services in line with their needs is another cost advantage that comes with flexibility.

With the activation of ready-made solution packages in Azure Monitor, the institution continues to monitor its deficiencies for related services and continues to take its actions. Thanks to its solution packages and dashboards such as Active Directory Assessment, AD Replication, Azure Activity, Change Tracking, DNS Analytics, Security patch monitoring and management, Office 365, SQL Assessment and Security Insights, TYH Tekstil provides high availability, business continuity, security, compliance, etc. can view its variables such as performance, operation, health status monitoring from a single window. These solution packages offer high-priority, medium-priority and low-priority recommendations to the institution regarding the actions they should take.

Using the Service Map solution included in Azure Monitor to monitor the communication between different services, the institution created the server service map and had the opportunity to quickly examine its servers and easily perform the dependency analysis of the workloads.

Thanks to the Azure Security Center, the organization, which has a hybrid security management and threat protection infrastructure, can analyze the actions to be taken on the security side from a single dashboard. With the Secure Score security score structure in the Security Center, they can quickly assess their security posture, determine their priorities and take action on those issues. By customizing its security policy according to the issues they need to focus on, the organization can ensure compliance with the requirements of regulations such as CIS, PCI DSS, SOC and ISO.

The Security Center also provides them with the SOC – Security Operations Center infrastructure. Using machine learning to process trillions of signals across Microsoft services and systems, the Security Center warns of threats such as remote desktop protocol (RDP) brute force attacks and SQL injection attacks. Azure Security Center also provides actionable recommendations for the elimination of these threats, providing the ability to analyze resource security health states by priority on the server, application, storage, data, identity and access sides.

Azure Sentinel offers more detailed configuration and reporting than SIEM (security information event management) and SOAR (security orchestration automatic response) solution and log analysis available in the cloud. Distinguishing from its competitors with the advantage of fast installation, Azure Sentinel stands out with its easy installation of the relevant connections, and its connection to the solutions offered by both Microsoft and different manufacturers. Microsoft’s ability to monitor in-house logs and create alarms on different cloud services such as Azure Active Directory, Azure Active Directory Identity Protection, Azure Advanced Threat Protection, Azure Information Protection, DNS, Cloud App Security, Office 365 is another advantage. With Azure Sentinel, which allows an enterprise-scale SIEM solution to be easily added to the system thanks to its integration with solutions from many different manufacturers, it is possible to provide an end-to-end view of the solutions used in the enterprise and to quickly implement threat detection and response processes with artificial intelligence.

Another advantage is the ability to monitor resources and detect and intervene in advance with the dashboards created on Azure Sentinel, which can write more than one query and run these queries together.

The roadmap of TYH Tekstil is quite clear. The company, which aims to have everything in the cloud, emphasizes that one of the most serious disadvantages, especially in multi-regional institutions, is a system room in each region. They underline that they aim to be completely in the cloud with as simple system rooms as possible, stating that system rooms require serious operation from traceability to security, from heat conditions to device investments.

The company, which tries to use all of the security services of Azure especially on the infrastructure side, continues to work on these solutions, aiming to expand the services and services such as Office 365, OneDrive, Power BI, Power Apps on the SAAS side.

Aiming to run SQL services as AS service at affordable costs and performances, TYH Tekstil states that they will be able to implement inspiring scenarios that will benefit from IoT services in the near future with their open vision to new generation systems.