
For more information about NSGs, see Network Security Groups. This removes the hassle of managing NSGs each time you need to securely connect to your virtual machines. Because Azure Bastion connects to your virtual machines over private IP, you can configure your NSGs to allow RDP/SSH from Azure Bastion only. You don't need to apply any NSGs to the Azure Bastion subnet.

No hassle of managing Network Security Groups (NSGs) You don't need a public IP address on your virtual machine. No Public IP address required on the Azure VMĪzure Bastion opens the RDP/SSH connection to your Azure VM by using the private IP address on your VM. This enables the traffic to traverse firewalls more securely. Your RDP/SSH session is over TLS on port 443. Remote Session over TLS and firewall traversal for RDP/SSHĪzure Bastion uses an HTML5 based web client that is automatically streamed to your local device. You can get to the RDP and SSH session directly in the Azure portal using a single-click seamless experience. Using Azure Bastion protects your virtual machines from exposing RDP/SSH ports to the outside world, while still providing secure access using RDP/SSH. When you connect via Azure Bastion, your virtual machines don't need a public IP address, agent, or special client software.īastion provides secure RDP and SSH connectivity to all of the VMs in the virtual network in which it is provisioned. It provides secure and seamless RDP/SSH connectivity to your virtual machines directly over TLS from the Azure portal or via native client. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network.

Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer.
