Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
241 questions
1 answer
Unable to associate NSG with Azure BastionSubnet
I'm unable to associate NSG on Azure Bastion Subnet. I created all the required NSG as per Microsoft, but still not able to associate.
asked 2024-04-13T08:14:32.7733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 53%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Mahavir Saroj
201
Reputation points
commented 2024-04-17T15:02:35.0533333+00:00
GitaraniSharma-MSFT
47,011
Reputation points Microsoft Employee
0 answers
Azure Bastion host unreachable issue
I have created Azure vnet peering two vnets for bastion access, When tried to troubleshoot the bastion to VM from network watcher ip flow connection is allowed,but not able to connecting the VM through bastion remote. bastion error.png Azure bastion…
asked 2024-04-03T09:14:40.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 11%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Sakthivel M
0
Reputation points
commented 2024-04-12T05:32:38.8033333+00:00
KapilAnanth-MSFT
34,766
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure Bastion in HUB VNET with FG Firewall and forced tunneling towards on-prem with site-to-site VPN (via VPN-GW)
Hi, I understand this question might be asked many times, but I am in that situation where I need some clairty. I have a hybrid model , where the on-prem need to connect to the Azure workloads (in spoke VNets), on the HUB VNets a 3rd party Firewall is…
asked 2024-04-03T22:06:59.79+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 71%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFJ%3C/text%3E%3C/svg%3E)
Faisal Jafar
20
Reputation points
accepted 2024-04-04T10:37:54.0133333+00:00
Faisal Jafar
20
Reputation points
1 answer
One of the answers was accepted by the question author.
Difficulty Achieving 5 Concurrent Sessions on Azure Bastion for Different Users on same server.
I've been experimenting with Azure Bastion and encountering some challenges regarding concurrent session management. According to Microsoft documentation, Azure Bastion allows for manual host scaling to manage concurrent RDP/SSH connections. The Basic…
asked 2024-03-26T07:59:08.84+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 79%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENK%3C/text%3E%3C/svg%3E)
Niket Kumar Singh
105
Reputation points
commented 2024-04-02T06:45:10.59+00:00
Niket Kumar Singh
105
Reputation points
0 answers
the user is unable to access the environment even after providing the access to the environment via bastion,
Created a new user and provided access to the environment, but the user is unable to access the environment via Bastion host. Note: the user has admin access to the console. Also noticed that " ADDED-BY" (it is supposed to be my name, but…
asked 2024-03-26T21:34:55.17+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 33%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Aswin Sivanandam
0
Reputation points
commented 2024-03-27T04:41:24.0533333+00:00
KapilAnanth-MSFT
34,766
Reputation points Microsoft Employee
2 answers
Azure AD login to Windows 2019 Datacenter VM via bastion failing
Hello, I have created and configured my Windows VM (Windows Server 2019 Datacenter) for Azure AD login along with the Virtual Machine Administrator Login role Role Assignment My bastion host is also native client enabled and are…
asked 2022-09-16T11:27:17.06+00:00
Atanu Gupta
141
Reputation points
answered 2024-03-23T17:44:00.2033333+00:00
Mahavir Saroj
201
Reputation points
1 answer
There was an error in requesting a session for a virtual machine via bastion.
After configuring the bastion,. If I try to connect my VM , it says "There was an error in requesting a session for a virtual machine via bastion."
asked 2024-03-04T06:16:04.51+00:00
Mulagiripattu Rangarajan Sundar Rajan
0
Reputation points
commented 2024-03-04T16:19:15.59+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
22,311
Reputation points Microsoft Employee
1 answer
Unable to access Bastion, connectivity issue even after the correct ports are setup
Setup Bastion, however unable to access it due to connectivity issues. Working fine when remote through SSH and the ports have already been adjusted according to Bastion FAQ. Next steps, thank you.
asked 2024-02-09T06:32:39.7233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 68%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJY%3C/text%3E%3C/svg%3E)
Joel Yang
0
Reputation points
edited an answer 2024-03-04T12:24:47.61+00:00
GitaraniSharma-MSFT
47,011
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Bastion standard vs bastion developer
Hello, what is the difference in connection to the virtual server between Bastion standard and Developer? My point is that if the virtual server doesn't have access to the public internet, Bastion standard (I've tried connecting to a private server IP…
asked 2024-02-22T14:51:11.8833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 8%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jakub Míka
20
Reputation points
commented 2024-02-27T07:45:22.37+00:00
KapilAnanth-MSFT
34,766
Reputation points Microsoft Employee
0 answers
Is there any plan to move away from CBC based ciphers within TLS cipher suites in Azure Bastion?
We have had a report from a security pen test vendor stating that weak CBC based ciphers are still in use by the Azure Bastion service and ideally these should be disabled. Viable alternatives include AES-GCM and ChaCha20-Poly1305 suites. I read in a…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 92%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
2 answers
Azure Bastion for external contractors
Hi, I was wondering if it is safe to use Azure Bastion to allow 3rd party external contractors access to specific servers in my vnet, or should it only be used for my own staff to connect in? I would just want to allow specific accounts RDP access to…
asked 2021-03-22T20:46:07.607+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 75%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
Simon Cassar
1
Reputation point
commented 2024-02-16T05:37:38.7133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 34%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEA%3C/text%3E%3C/svg%3E)
Ebenezer Abraham
1
Reputation point
3 answers
How to fix the dialog"A Bastion session should be initiated only from Azure Portal"?
So I initiate a bastion session from the Azure portal: from my VM page I click on connect > bastion, I fill in my credentials (I use a password from an Azure Key Vault), and click on connect. The option "Open in new browser tab" is…
asked 2023-02-06T11:32:37.4+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 64%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFM%3C/text%3E%3C/svg%3E)
Francois MENTEC
0
Reputation points
commented 2024-02-09T18:55:37.6366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 16%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
Graham Schmidt
0
Reputation points Microsoft Employee
4 answers
Bastion Connection Erros on Azure VM
Hello, I continuously have connection issues (intermittent) with one of my VM's in the Azure portal. Running connection diagnostics shows no issue. The health page on the bastion host also shows no issue. However, when connecting via bastion, I…
asked 2021-07-06T20:30:19.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 32%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Lance_J
1
Reputation point
commented 2024-02-08T21:01:55.05+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 96%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEP%3C/text%3E%3C/svg%3E)
Elliott Park
0
Reputation points
1 answer
One of the answers was accepted by the question author.
Unable to add Bastion subnet
I am doing the MS Cybersecurity Solutions and MS Defender Course through Coursera. I have upgraded to P2 tier. I have enabled Just-In-Time function and tested it works. The guided exercise on "Shield virtual machines using Bastion" requires the…
asked 2023-10-31T04:14:37.0533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 6%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
LW Tan
55
Reputation points
commented 2024-02-08T19:56:45.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 26%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECN%3C/text%3E%3C/svg%3E)
Christian Nnabuihe
5
Reputation points
0 answers
How to login Azure VM using Entra ID credential via Azure bastion.
Hello Focks, How to login Azure VM using Entra ID credential via Azure bastion. I am able to login only with VM local account credentials but not with Entra id credential. Azure VM running with Windows 10 22H2 OS and it is Azure AD joined. Please help…
asked 2023-11-24T20:04:28.38+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 90%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Sadish Kumar KK
5
Reputation points
commented 2024-02-08T09:28:12.9033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 34%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDA%3C/text%3E%3C/svg%3E)
dinesh.angadi
0
Reputation points
1 answer
unable to deploy a bastion
Since few days , I've recieved this error while creating a bastion. can't find a solution ... do youhave an idesa ? thks
asked 2022-04-20T09:47:29.303+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 5%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVD%3C/text%3E%3C/svg%3E)
VINCENT DUBOIS
1
Reputation point
edited the question 2024-02-08T00:07:13.6966667+00:00
ChaitanyaNaykodi-MSFT
22,311
Reputation points Microsoft Employee
0 answers
Getting issue in network connection in my Private Vm
I am trying to create a private Vm then connecting it using a bastion. I created a Vm in a subnet which is attached to a NAT, NSG and a route table. I am connecting this Vm with a bastion server. I am getting issue in internet connectivity inside the…
asked 2024-01-31T13:10:19.5533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 28.000000000000004%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJD%3C/text%3E%3C/svg%3E)
Jeet Dagar
0
Reputation points
edited a comment 2024-02-07T01:26:23.6533333+00:00
ChaitanyaNaykodi-MSFT
22,311
Reputation points Microsoft Employee
2 answers
Multiple RDP Bastion connections
I have created an Ubuntu 20.04 virtual machine. On this VM I have 2 users. User1 is an admin and User2 is a sudo level user. I followed these steps to install xrdp on the VM…
asked 2024-01-03T23:27:18.65+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 40%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHD%3C/text%3E%3C/svg%3E)
Hamzeian, Donya
20
Reputation points
commented 2024-01-15T05:01:32.7166667+00:00
KapilAnanth-MSFT
34,766
Reputation points Microsoft Employee
1 answer
Not able to access AD Server through Bastion using On-Prem User Credentials.
Hello experts! I have configured Azure Bastion in my environment, and removed public IPs of the VM. When I am trying to access the VM using Azure User creds, I can access it, and when I am trying to access it using On-prem user creds it shows me an…
asked 2023-12-21T11:36:19.02+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 95%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Siya Kumari
506
Reputation points
commented 2024-01-10T12:57:28.6+00:00
GitaraniSharma-MSFT
47,011
Reputation points Microsoft Employee
1 answer
Azure NSG rules for Azure Bastion
I am looking for the outbound ports from the VM subnet required for Azure Bastion service to function. I have found this MS Article, but this only applies to the NSG applied to the Bastion subnet. I have a rule [4096]: DenyAllOutbound…
asked 2022-09-08T13:26:50.883+00:00
Aaron Krytus
1
Reputation point
commented 2024-01-05T16:20:13.2166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 22%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Chris
0
Reputation points