How to use Azure Bastion to connect securely to your Azure VMs | Azure Friday

Using a bastion host can help limit threats such as port scanning and other types of malware targeting your VMs. Ashish Jain joins Scott Hanselman to show how Azure Bastion gives you secure and seamless RDP and SSH access to your virtual machines. Now you can securely access your VMs over SSL from the Azure portal and without exposing public IP addresses.
Azure Bastion overview
aka.ms/azfr/583/01
Azure Bastion docs
aka.ms/azfr/583/02
Deploy Azure Bastion in an Azure Virtual Network (sample ARM template)
aka.ms/azfr/583/03
Create a free account (Azure)
aka.ms/azfr/583/free
#microsoft #microsoftazure

[@ondrapaulicek]

I really like Azure Fridays, keep up the great work guys!

[@davidlockley9251]

Great explanation guys. Very easy to follow, even 2.5 yrs later :)

[@RobertLenior]

Absolutely stunning ! Thanks

[@vishnuks2917]

Good Explanation. Really helpful..

[@miluskalucich2901]

if i pay for the azure bastion service i need to pay for a SSL Certificate for my RDWeb/RDGW Server? or it is enought with the azure bastion?

[@user-lc8dw6qu7r]

Thanks a lot. It was useful and clear.

[@nigamonwheels145]

Really good and informative

[@AsheeshKum]

Any way we can access from my desktop thru internet to private subnet linux machine VNC server GUI via bastion windows machine... ANY HELP is APPRECIATED.

[@kamilble2441]

Can you copy paste files as in normal RDP?

[@sysadmin_dc3398]

It sounds interesting, might try it sometime.

[@welltecnologia]

Realy very very good! But, version for connect directly from desktop?

[@whereisthehook]

Does Bastion only support RDP/SSH, or can I also connect to a HTTPS webpage through it?

[@manishgoyal5424]

Sir pls. Tell me , for ex. In a company 50 employees are how will they work in azure.

[@jpedfonseca]

Hello can you tell me if Windows VMs from Azure supports hyper-v? If not, there is any change to connect more than one VM in network? Thanks.

[@MicrosoftAzure]

Hey there João! This certainly seems possible. Have a look at the documentation we have available here for more details. msft.it/6058TW1Gg

[@TechLeadEngineer]

The main security risk is on the Bastion having to allow SSH and RDP access on its public IP. Is there a way to restrict the Bastion to only be accessible using a private IP? Or perhaps does Azure Private Link an option to access the Bastion resource?

[@saravansince86]

We are getting only the CLI interface.What about GUI interface of the server access.

[@jainashish]

part of our roadmap.

[@amjadafana]

When will AAD authentication be supported? Right now only local VM credentials only are supported which does not satisfy most if not all organizations and requirements to use domain trusted connections.

[@MicrosoftAzure]

Hey there! AAD support is something the team is working towards as part of the roadmap, but we don't have any specific time frame that we can share on its release at this time.

[@fnd237]

Can you run this in dual monitor mode? If not, the users won't accept it.

[@LelandVelasco]

Nice

[@morzei3005]

Indeed you assign static IP to bastion and then if that IP has been compromised, all VMs would be accessible?!

[@pigrebanto]

does it allow to access to all VMs in the VNET?

[@MicrosoftAzure]

Hi there, Antonio! Azure Bastion manages connectivity to all VMs deployed in the local and peered VNET(s). More info: msft.it/6058Z7Rjk

[@rajivgupta9400]

can we access Bastion through Azure Ad users

[@MicrosoftAzure]

Hey there Rajiv! Right now this is not a supported feature, however this is something that is currently on the roadmap! Keep an eye out on the Azure updates page for the latest updates: msft.it/6058TsGHY

[@darshank]

The configuration part is missing.

[@roopeshk.r3219]

Hi, Microsoft ..i'm a Student and i'm using the windows to connect LinuxVm and followed up until last step ... Where he types ls ..then how is the VM starts ?

[@MicrosoftAzure]

Hello. To clarify, the Virtual Machine had already been started prior to the demonstration for using Azure Bastion to login. If you need assistance with connecting the VM, please take a look at this guide. msft.it/6054VRWHO

[@roopeshk.r3219]

@@MicrosoftAzure thank you Ms Azure i have tried that and followed but still facing same issue and i have raised the question..awaiting Azure Bastion expert suggesions on Azure Q/A.

[@MicrosoftAzure]

Thanks for letting us know. To clarify, are you saying that you have an open support ticket, or have asked this question on a forum?

[@roopeshk.r3219]

@@MicrosoftAzure Actually i went over to Twitter Azure and they advised me to go with Q/A in forum..but can you tell me how i shd raise support ticket.

[@MicrosoftAzure]

Thanks for clarifying. Our @AzureSupport team on Twitter is able to route in the same direction. The Q&A forum is another place to find support, if you don't have a support plan. Here's how to file a support ticket, if you have an active plan. msft.it/6058VRtvi

[@jho186]

Can we use Azure bastion to ssh Routers and switches?

[@MicrosoftAzure]

Hi there! Are your SSH routers and switches reachable from your virtual network at this time?

[@jho186]

@@MicrosoftAzure yes all in same supernet

[@MicrosoftAzure]

Thank you so much. Yes, this is supported. To proceed, you'll need an IP based connection to be turned on. Here is some information that may be useful: msft.it/6052c33wY

[@bhavana2131983]

Did not show the How to part

[@bhaskars8209]

i have a azure ad but forgot the password

[@StarsManny]

Why is it so quiet?

[@Adrien_broner]

Is it free?

[@nigamonwheels145]

Wow

[@tejbeepat1477]

is this feature free?

[@mehdi5738]

Thanks Folks

[@thearchibaldtuttle]

Always understood "Bastian", which is a douchebag name IMHO. However, Bastion sounds like a great solution!

[@ulrichnyamsi6975]

Need to update this video. As it is, not useful at all.

[@ALionLifeOfLiving]

no how to

[@kishoreahmed]

It is very costly service and there should be pause option for this service when not in use.

[@LuisBlancoAustin]

They don't even show you how to configure the darn thing.

[@user-bj4nu4yw5i]

Azure documentation website is a goldmine, use it. docs.microsoft.com/en-us/azure/bastion/

[@Southpaw07]

I assume MS going to dump Bastion entirely :). there is no integration with AAD and MFA so not a solution and stone age technology

[@mobracska]

GRRRRRRRRRRRRR Unable to use keyboard shortcuts ....

[@lordbagira3626]

jump boxes and public IPs haven't been a thing for a long time in cloud. i thought this was an old video until I saw the date. use a vpn. this video is not a best practice. hell, an authenticated socks proxy is more flexible than this. forcing ops teams to use a web browser for an ssh session? get real.

[@ahmetgure1506]

All these are fake solutions. Make a real tool, like Vmware Remote Console!..

[@James-sc1lz]

No that impressed. All I need to do is look at AWS and they will have the same thing but from many moons ago. Talk about catch up MS.