Unable to associate NSG with Azure BastionSubnet

Mahavir Saroj 201

I'm unable to associate NSG on Azure Bastion Subnet. I created all the required NSG as per Microsoft, but still not able to associate. User's image

User's image

GitaraniSharma-MSFT 47,421 Reputation points Microsoft Employee

2024-04-15T12:13:35.28+00:00

Hello @Mahavir Saroj ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

As mentioned by @Ioannis Katsaounis below and documented in the Azure Bastion NSG doc, below are the required rules that you need to configure in case you want to associate a NSG to your Bastion subnet. All the below rules should be added before you add a deny all rule.

Ingress Traffic:

Egress Traffic:

NOTE: If you choose to use an NSG with your Azure Bastion resource, you must create all of the above ingress and egress traffic rules. Omitting any of the following rules in your NSG will block your Azure Bastion resource from receiving necessary updates in the future and therefore open up your resource to future security vulnerabilities.

Refer: https://learn.microsoft.com/en-us/azure/bastion/bastion-nsg#apply

Could you please create all the above required rules and then try to associate the NSG to your Bastion Subnet?

Regards,

Gita
GitaraniSharma-MSFT 47,421 Reputation points Microsoft Employee

2024-04-17T15:02:35.0533333+00:00

@Mahavir Saroj ,

Could you please provide an update on this post?

Kindly let us know if the below helps or you need further assistance on this issue.

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

1 answer

Ioannis Katsaounis 176 Reputation points

2024-04-13T09:01:17.2233333+00:00

Dear @Mahavir Saroj

Checking the Firewall rules you attached it seems that the sources/ destinastions configured in them aren't the recommended ones as depicted below.

Ingress

Egress

If you have found the answer provided to be helpful, please click on the "Accept answer/Upvote" button so that it is useful for other members in the Microsoft Q&A community.

Regards,

Ioannis
Please sign in to rate this answer.

0 comments No comments
Sign in to comment