search

Azure / SimuLand

Understand adversary tradecraft and improve detection strategies
MIT License
694 stars 79 forks source link

Template Validation Error - "Microsoft.Network/networksecuritygroups/nsg-rdp-allow" #11

Closed T0pCyber closed 3 years ago

T0pCyber commented 3 years ago

When attempting to deploy simuland, and completing all the required fields, we keep on getting "Template Validation Error". This seems to be an error from the downstream Win10-AD-ADFS template. Our desired configuration is to use AzureBastion. We selected AzureBastionHost and left the "Allowed IP Addresses" blank. Can't seem to figure out how to fix this in our deployment. Thanks.

image

image

Cyb3rWard0g commented 3 years ago

Hello @T0pCyber !

Would you mind keeping the AllowedIP Address as *? It is set by default but it is not used since AzureBastionHost is the defaut. I see you are using the Deploy to Azure blue button in the README of the deploy document right? The following one: https://github.com/Azure/SimuLand/tree/main/2_deploy/aadHybridIdentityADFS#azure-ad-hybrid-identity-active-directory-federation-services-ad-fs-deployment

Cyb3rWard0g commented 3 years ago

I deployed it via the Azure CLI following the docs and it worked just fine. I have not tested the ARM template via the 'Deploy to Azure' blue button

image

T0pCyber commented 3 years ago

Is there a dependency on the Domain name? Do I need to use Simuland.com?

T0pCyber commented 3 years ago

I was able to get it deployed using the Azure CLI steps. Had some errors but I think I know why that happened. My assumption is that the Deploy to Azure link would work.

Cyb3rWard0g commented 3 years ago

Hello @T0pCyber ! Yes I added the domain name to the Azure CLI example in the docs.