How to protect the windows Azure VM from the internet

Vishnu Anand 185

We are continuously receiving alerts for too many login attempts from different countries. I know we can restrict RDP access using network settings on the Azure VM page, but our users don’t have static IP addresses, making it difficult to set up. Is there any other option we can use, or does Azure provide any VPN setup for this?

Alberto Cruz 5 Reputation points

2024-10-01T05:34:52.5866667+00:00

Hello, this is my first answer, I hope it helps you, the safest way is through VPN, Azure has the Virtual Network Gateway service that allows you to do VPN point to site for end users, you avoid dealing with the waves of attacks that exist in the network, or failing that I sometimes use an add-on called RDPGuard, it is not expensive and allows you to filter in a better way attack attempts directly banning public IPs of the attempts.
Ganesh Patapati 735 Reputation points Microsoft Vendor

2024-10-01T18:02:28.0833333+00:00
Hi Vishnu Anand,

Greetings!

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

To restrict RDP access to Azure VMs for users without static IP addresses, you can set up a point-to-site VPN connection using Azure Virtual Network Gateway. This allows users to connect to your Azure VM securely without exposing it to the public internet.- Alternatively, you can use Azure Bastion, which provides secure and seamless RDP/SSH connectivity to your virtual machines without exposing them to the public internet.

Another approach is to implement a conditional access policy that blocks access via legacy methods, combined with a multi-factor authentication (MFA) policy, to safeguard your VM from unauthorized access.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Regards,

Ganesh
Vishnu Anand 185 Reputation points

2024-10-03T10:58:27.37+00:00

I found the first option for configuring the point-to-site VPN. Could you please share the link that mentions the second option so I can review the settings?
Vishnu Anand 185 Reputation points

2024-10-03T11:00:03.6966667+00:00

@Ganesh Patapati I found the first option for configuring the point-to-site VPN. Could you please share the link that mentions the second option so I can review the settings?
Ganesh Patapati 735 Reputation points Microsoft Vendor

2024-10-03T13:07:44.83+00:00

Hello Vishnu Anand,

Greetings,

Please Refer the Below document to configure point to site VPN:

Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

Please let me know whether your issue has been resolved or not.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Regards,

Ganesh
Vishnu Anand 185 Reputation points

2024-10-04T07:27:43.6666667+00:00

@Ganesh Patapati , Yes, I have checked this link, but I need to try the second option you mentioned:

'Another approach is to implement a conditional access policy that blocks access via legacy methods, combined with a multi-factor authentication (MFA) policy, to safeguard your VM from unauthorized access.'

Can you provide me with a link to refer to the settings for this setup?
Ganesh Patapati 735 Reputation points Microsoft Vendor

2024-10-07T10:41:18.8133333+00:00
Hello Vishnu Anand,

I hope you are doing well!

I wanted to make sure you had an opportunity to read the response to your query in terms of fixing this issue.

Do not hesitate to contact us if you are still experiencing issues. We are pleased to help you.

I value your time and look forward to hearing from you on this.

Best wishes,

Ganesh
Ganesh Patapati 735 Reputation points Microsoft Vendor

2024-10-08T14:24:04.2166667+00:00
Hello Vishnu Anand,

Greetings!

I wanted to make sure you had an opportunity to read the response to your query in terms of fixing this issue.

Do not hesitate to contact us if you are still experiencing issues. We are pleased to help you.

I value your time and look forward to hearing from you on this.

Best wishes,

Ganesh

1 answer

Ganesh Patapati 735 Reputation points Microsoft Vendor

2024-10-04T14:28:54.32+00:00

Hello Vishnu Anand,

I hope you are doing well!

Azure Bastion documentation

Learn how to use Azure Bastion to connect to a virtual machine. When you connect via Azure Bastion.

Refer: https://learn.microsoft.com/en-us/azure/bastion/

Refer: https://learn.microsoft.com/en-us/azure/bastion/private-only-deployment
Refer: https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

Refer to all of the following documents and you will find the appropriate solution.

Do not hesitate to contact us if you are still experiencing problems. We are pleased to help you.

I value your time and look forward to hearing from you on this.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution.

Your contribution is highly appreciated.

With regards,

Ganesh
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to protect the windows Azure VM from the internet

1 answer

Your answer