Infrastructure Overview
NSG Rules (Default)
| Port | Protocol | Action |
|---|---|---|
| 22 | SSH | Allow |
| 80 | HTTP | Allow |
| 443 | HTTPS | Allow |
Beacon AI Assistant
Security Posture
Before Hardening (Nmap Scan)
Starting Nmap 7.94 ( https://nmap.org )
Nmap scan report for student-lab-server (51.140.247.180)
Host is up (0.041s latency).
Not shown: 996 closed tcp ports (reset)
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https
3306/tcp open mysql
Nmap done: 1 IP address (1 host up) scanned in 1.42 seconds
After Hardening (Nmap Scan)
Starting Nmap 7.94 ( https://nmap.org )
Nmap scan report for student-lab-server (51.140.247.180)
Host is up (0.040s latency).
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE
80/tcp open http
443/tcp open https
Nmap done: 1 IP address (1 host up) scanned in 2.11 seconds
* SSH (22) restricted to university IPs only. MySQL (3306) blocked externally via NSG.
Network Topology
[ Internet ]
│
▼
┌─────────────────────────────────────────────────────────┐
│ Azure Region: UK South │
│ │
│ 🌐 Virtual Network: campus-vnet-west (10.1.0.0/16) │
│ │
│ ┌─────────────────────────────────────────────────┐ │
│ │ 🔒 NSG: default-nsg │ │
│ │ Inbound: 80(Allow), 443(Allow), 22(Restricted) │ │
│ └───────────────────────┬─────────────────────────┘ │
│ │ │
│ ┌───────────────────┴───────────────────┐ │
│ ▼ ▼ │
│ ┌───────────────┐ ┌───────────────┐
│ │ servers-subnet│ │ dmz-subnet │
│ │ 10.1.1.0/24 │ │ 10.1.3.0/24 │
│ ├───────────────┤ ├───────────────┤
│ │ 🖥️ student-lab│ │ 🛡️ kali-scann │
│ │ IP: 10.1.1.4 │ │ IP: 10.1.3.4 │
│ └───────────────┘ └───────────────┘
└─────────────────────────────────────────────────────────┘
Presentation
Year 1 Cloud Roadmap
Audit & Secure
Comprehensive audit of existing infrastructure. Map workloads to Azure services. Deploy Azure Monitor and Log Analytics. Implement strict NSG rules and role-based access control (RBAC).
AI Ops & IaC
Deploy Model Context Protocol (MCP) for AI-driven operations. Implement Infrastructure as Code using Bicep/Ansible. Set up automated patching schedules and self-healing alert mechanisms.
Esports & Scaling
Deploy Azure Virtual Desktop (AVD) on Azure Local for Esports facility. Implement GPU partitioning for high-end rendering. Extend network to London campus. Launch real-time IT operations dashboard.
Projected Impact
40%
Reduction in manual IT operations
60%
Cost savings via auto-scaling
99.9%
Target infrastructure uptime
<1ms
Latency for local Esports nodes