How to use Azure Bastion to connect securely to your Azure VMs | Azure Friday

[@davidlockley9251]

Great explanation guys. Very easy to follow, even 2.5 yrs later :)

[@ondrapaulicek]

I really like Azure Fridays, keep up the great work guys!

[@vishnuks2917]

Good Explanation. Really helpful..

[@RobertLenior]

Absolutely stunning ! Thanks

[@nigamonwheels145]

Really good and informative

[@ЯрославМизгирев-р2р]

Thanks a lot. It was useful and clear.

[@sysadmin_dc3398]

It sounds interesting, might try it sometime.

[@welltecnologia]

Realy very very good! But, version for connect directly from desktop?

[@amjadafana]

When will AAD authentication be supported? Right now only local VM credentials only are supported which does not satisfy most if not all organizations and requirements to use domain trusted connections.

[@MicrosoftAzure]

Hey there! AAD support is something the team is working towards as part of the roadmap, but we don't have any specific time frame that we can share on its release at this time.

[@fnd237]

Can you run this in dual monitor mode? If not, the users won't accept it.

[@TechLeadEngineer]

The main security risk is on the Bastion having to allow SSH and RDP access on its public IP. Is there a way to restrict the Bastion to only be accessible using a private IP? Or perhaps does Azure Private Link an option to access the Bastion resource?

[@morzei3005]

Indeed you assign static IP to bastion and then if that IP has been compromised, all VMs would be accessible?!

[@darshank]

The configuration part is missing.

[@whereisthehook]

Does Bastion only support RDP/SSH, or can I also connect to a HTTPS webpage through it?

[@saravansince86]

We are getting only the CLI interface.What about GUI interface of the server access.

[@jainashish]

part of our roadmap.

[@kamilble2441]

Can you copy paste files as in normal RDP?

[@miluskalucich2901]

if i pay for the azure bastion service i need to pay for a SSL Certificate for my RDWeb/RDGW Server? or it is enought with the azure bastion?

[@AsheeshKum]

Any way we can access from my desktop thru internet to private subnet linux machine VNC server GUI via bastion windows machine... ANY HELP is APPRECIATED.

[@manishgoyal5424]

Sir pls. Tell me , for ex. In a company 50 employees are how will they work in azure.

[@LelandVelasco]

Nice

[@roopeshk.r3219]

Hi, Microsoft ..i'm a Student and i'm using the windows to connect LinuxVm and followed up until last step ... Where he types ls ..then how is the VM starts ?

[@MicrosoftAzure]

Hello. To clarify, the Virtual Machine had already been started prior to the demonstration for using Azure Bastion to login. If you need assistance with connecting the VM, please take a look at this guide. msft.it/6054VRWHO

[@roopeshk.r3219]

@@MicrosoftAzure thank you Ms Azure i have tried that and followed but still facing same issue and i have raised the question..awaiting Azure Bastion expert suggesions on Azure Q/A.

[@MicrosoftAzure]

Thanks for letting us know. To clarify, are you saying that you have an open support ticket, or have asked this question on a forum?

[@roopeshk.r3219]

@@MicrosoftAzure Actually i went over to Twitter Azure and they advised me to go with Q/A in forum..but can you tell me how i shd raise support ticket.

[@MicrosoftAzure]

Thanks for clarifying. Our @AzureSupport team on Twitter is able to route in the same direction. The Q&A forum is another place to find support, if you don't have a support plan. Here's how to file a support ticket, if you have an active plan. msft.it/6058VRtvi

[@pigrebanto]

does it allow to access to all VMs in the VNET?

[@MicrosoftAzure]

Hi there, Antonio! Azure Bastion manages connectivity to all VMs deployed in the local and peered VNET(s). More info: msft.it/6058Z7Rjk

[@rajivgupta9400]

can we access Bastion through Azure Ad users

[@MicrosoftAzure]

Hey there Rajiv! Right now this is not a supported feature, however this is something that is currently on the roadmap! Keep an eye out on the Azure updates page for the latest updates: msft.it/6058TsGHY

[@jpedfonseca]

Hello can you tell me if Windows VMs from Azure supports hyper-v? If not, there is any change to connect more than one VM in network? Thanks.

[@MicrosoftAzure]

Hey there João! This certainly seems possible. Have a look at the documentation we have available here for more details. msft.it/6058TW1Gg

[@bhaskars8209]

i have a azure ad but forgot the password

[@bhavana2131983]

Did not show the How to part

[@ulrichnyamsi6975]

Need to update this video. As it is, not useful at all.

[@mehdi5738]

Thanks Folks

[@StarsManny]

Why is it so quiet?

[@thearchibaldtuttle]

Always understood "Bastian", which is a douchebag name IMHO. However, Bastion sounds like a great solution!

[@nigamonwheels145]

Wow

[@Adrien_broner]

Is it free?

[@kishoreahmed]

It is very costly service and there should be pause option for this service when not in use.

[@Southpaw07]

I assume MS going to dump Bastion entirely :). there is no integration with AAD and MFA so not a solution and stone age technology

[@LuisBlancoAustin]

They don't even show you how to configure the darn thing.

[@0x404-w5w]

Azure documentation website is a goldmine, use it. docs.microsoft.com/en-us/azure/bastion/

[@tejbeepat1477]

is this feature free?

[@ALionLifeOfLiving]

no how to

[@mobracska]

GRRRRRRRRRRRRR Unable to use keyboard shortcuts ....

[@ahmetgure1506]

All these are fake solutions. Make a real tool, like Vmware Remote Console!..

[@lordbagira3626]

jump boxes and public IPs haven't been a thing for a long time in cloud. i thought this was an old video until I saw the date. use a vpn. this video is not a best practice. hell, an authenticated socks proxy is more flexible than this. forcing ops teams to use a web browser for an ssh session? get real.

[@James-sc1lz]

No that impressed. All I need to do is look at AWS and they will have the same thing but from many moons ago. Talk about catch up MS.

[@jho186]

Can we use Azure bastion to ssh Routers and switches?

[@MicrosoftAzure]

Hi there! Are your SSH routers and switches reachable from your virtual network at this time?

[@jho186]

@@MicrosoftAzure yes all in same supernet

[@MicrosoftAzure]

Thank you so much. Yes, this is supported. To proceed, you'll need an IP based connection to be turned on. Here is some information that may be useful: msft.it/6052c33wY