tag:blogger.com,1999:blog-38182690579786825362024-03-13T01:17:42.607-07:00Cloud TechnologyDinesh Singhhttp://www.blogger.com/profile/00934944806001617572noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-3818269057978682536.post-81110580126813850252019-06-26T13:13:00.000-07:002019-06-26T13:13:24.031-07:00Microsoft Azure Bastion Services<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="margin-bottom: .0001pt; margin: 0in;">
<a href="https://www.blogger.com/null" name="_GoBack"></a><span style="color: black; font-family: Georgia, "Times New Roman", serif; margin: 0px;">In Microsoft Azure all monitoring and management for the VMs in the Azure should be performed by the jumpbox in the management subnet. Also, implementing a DMZ between Azure and on-premises datacenter, define a single network route from the on-premises network through the gateway to the jumpbox, in order to restrict access.</span></div>
<div style="-webkit-text-stroke-width: 0px; margin-bottom: .0001pt; margin: 0in; orphans: 2; word-spacing: 0px;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; margin: 0px;">If gateway connectivity from your on-premises network to Azure is down, you can still reach the jumpbox by deploying a public IP address, adding it to the jumpbox, and logging in from the Internet.</span></div>
<div style="-webkit-text-stroke-width: 0px; margin-bottom: .0001pt; margin: 0in; orphans: 2; word-spacing: 0px;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">There are multiple options to place the management server<br />(Jumpbox) in Azure Stage environment:</span></span><span style="color: black; margin: 0px;"></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><span style="color: black; font-size: 11pt; margin: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;"></span><span style="font-size: small;"></span><br style="mso-special-character: line-break;" /></span><span style="color: black; margin: 0px;"></span></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"><span style="margin: 0px; white-space: pre-wrap;"><b><span style="color: black; font-size: 11pt; margin: 0px;">Option-1 </span></b></span></span><span style="font-family: Georgia, "Times New Roman", serif;"><span style="margin: 0px; white-space: pre-wrap;"><b><span style="margin: 0px; white-space: pre-wrap;">Place JumpBox on Separate Subnet (without PIP) </span></b></span></span><span style="color: black; margin: 0px;"></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"><span style="color: black; margin: 0px;">In this option, d</span><span style="color: black; font-size: 11pt; margin: 0px;"><span style="margin: 0px; white-space: pre-wrap;">o not create a public IP address for the jumpbox. Instead, create one route to access the jumpbox through the incoming gateway. Create NSG rules so the management subnet only responds to requests from the allowed route.</span></span></span><span style="color: black; margin: 0px;"></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><b><span style="font-family: Georgia, "Times New Roman", serif;"><span style="color: black; font-size: 11pt; margin: 0px;">Option-2 </span><span style="margin: 0px; white-space: pre-wrap;">Place JumpBox on Separate Subnet (with PIP) </span></span></b></span><span style="color: black; margin: 0px;"></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">Create a public IP address for the jumpbox. Create NSG rules so the management subnet only responds to requests from the allowed route.</span></span><span style="color: black; margin: 0px;"></span></div>
<div style="margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><b><span style="font-family: Georgia, "Times New Roman", serif;"><span style="color: black; font-size: 11pt; margin: 0px;">Option-3 </span><span style="margin: 0px; white-space: pre-wrap;">Azure Bastion Host</span></span></b></span><span style="color: black; margin: 0px;"></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="margin: 0px; white-space: pre-wrap;"><span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">Microsoft recently released manage PaaS service called Azure “Bastion” service. Azure Bastion is a new managed PaaS service that provides seamless RDP and SSH connectivity to Stage virtual machines over the Secure Sockets Layer (SSL). This is completed without any exposure of the public IPs on virtual machines. Azure Bastion provisions directly in Stage Azure Virtual Network,<br />providing bastion host or jump server as-a-service and integrated connectivity to all virtual machines in virtual networking using RDP/SSH directly from and through a browser and the Azure portal.</span></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">Azure Bastion is provisioned directly in VNet and support all VMs in VNet using the SSL without any exposure through public IP address.</span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">Azure Bastion is deploying in the virtual network providing RDP/SSH access for all authorization VMs in Azure network, the following diagram will describe more:</span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlPwd6-APhscRwvSsXWy57-L1UQp-zHkfgF33ThoiqhWD8tjJhMQe0c_n8UC9lejRRYoIH9KX-YN-4tliM6hyphenhyphen_FvRGJOMoUc8IRHq9UNEXMq-cV5X3X1f0iT6J4s4x0tO5mGWrFR7knQ8/s1600/1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="589" data-original-width="847" height="277" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlPwd6-APhscRwvSsXWy57-L1UQp-zHkfgF33ThoiqhWD8tjJhMQe0c_n8UC9lejRRYoIH9KX-YN-4tliM6hyphenhyphen_FvRGJOMoUc8IRHq9UNEXMq-cV5X3X1f0iT6J4s4x0tO5mGWrFR7knQ8/s400/1.JPG" width="400" /></span></a></div>
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br />
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;"><b>Following are the key features</b></span><br />
<b><span style="font-family: georgia;"></span></b></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><b><i>RDP and SSH from the Azure portal</i></b>: You can RDP and SSH sessions directly in the Azure portal.<br /><b><i>Remote session over SSL and firewall traversal for RDP/SSH</i></b>: You can initiate the RDP/SSH session via HTML5 based web clients over SSL on port 443. This allows easy and securely traversal of corporate firewalls.<br /><b><i>No public IP required on Azure Virtual Machines</i></b>: Azure Bastion opens the RDP/SSH connection to Azure virtual machine using a private IP, limiting exposure the infrastructure to the public Internet.<br /><b><i>Simplified secure rules management:</i></b> Simple one-time configuration of Network Security Groups (NSGs) to allow RDP/SSH from only Azure Bastion.<br /><b><i>Increased protection against port scanning</i></b>: The limited exposure of virtual machines to the public Internet will help protect against threats, such as external port scanning.<br /><b><i>Hardening in one place to protect against zero-day exploits</i></b>: Azure Bastion is a managed service maintained by Microsoft. It’s continuously hardened by automatically patching and keeping up to date against known vulnerabilities.</div>
<div style="background: white; line-height: normal; margin: 0px 0px 12px; text-indent: -0.25in;">
</div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><br /></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Georgia, "Times New Roman", serif;"><b>Registration <span style="color: black; font-size: 11pt; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-size: 14.66px; font-style: normal; font-variant: normal; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">an Azure Bastion</span></span></b></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-size: 11pt; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-size: 14.66px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; font-size: small; margin: 0px;">1. Signed to Azure account with using the subscription, and then register (enroll)</span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-size: 11pt; margin: 0px;"></span></div>
<div style="background-attachment: scroll; background-clip: border-box; background-image: none; background-origin: padding-box; background-position: 0% 0%; background-repeat: repeat; background-size: auto; line-height: 16.55pt; margin: 0in;">
<span style="background-color: #999999; color: #000025; font-family: georgia;"><i>Register-AzureRmProviderFeature -FeatureName AllowBastionHost -ProviderNamespace Microsoft.Network</i></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-size: 11pt; margin: 0px;"><span style="background-color: #fafafa; color: black; display: inline; float: none; font-size: 14px; font-style: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-indent: 0px; text-transform: none; white-space: pre; word-spacing: 0px;"></span></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-size: 11pt; margin: 0px;"><span style="background-color: #fafafa; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-indent: 0px; text-transform: none; white-space: pre; word-spacing: 0px;">2. Register Azure subscription once again with Microsoft.Network provider namespace</span></span></div>
<div style="background-attachment: scroll; background-clip: border-box; background-image: none; background-origin: padding-box; background-position: 0% 0%; background-repeat: repeat; background-size: auto; line-height: 16.55pt; margin: 0in;">
<span style="background-color: #999999; color: black; font-family: Georgia, "Times New Roman", serif; margin: 0px;"><i>Register-AzureRmResourceProvider -ProviderNamespace Microsoft.Network</i></span></div>
<div style="background: white; line-height: 16.55pt; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: Georgia, "Times New Roman", serif; margin: 0px;">3. Verify the AllowBastionHost feature registered with the subscription</span></div>
<div style="background-attachment: scroll; background-clip: border-box; background-image: none; background-origin: padding-box; background-position: 0% 0%; background-repeat: repeat; background-size: auto; line-height: 16.55pt; margin: 0in;">
<span style="background-color: #999999; color: black; font-family: Georgia, "Times New Roman", serif; margin: 0px;"><i>Get-AzureRmProviderFeature -ProviderNamespace Microsoft.Network</i></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;"></span><span style="background-color: #999999;"></span><i></i><br /></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"> <b>Creating an Azure Bastion</b></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-size: 14.66px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">1. Go to in the <a href="https://portal.azure.com/?feature.canmodifystamps=true&Microsoft_Azure_Compute=flight17&Microsoft_Azure_HybridNetworking=flight3&microsoft_azure_marketplace_itemhidekey=bastionhostv2&microsoft_azure_compute_azbastion=true#home">Azure portal - preview</a> only, click + Create a resource </span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-size: 14.66px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">2. Search the Marketplace field, type Bastion, then click Enter to get to the search results</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8rG3N6hHxh6YEQcHP_NzekEQ2psKc5jgdTtzXydxdXUTGkNJvavAzCOODPqU6aJttLKi9SZJBWtfoKBiyTBx0Nj51ixFDYhG4P0ADL4U4P4fL6NmXjNEAR8OookLkZ3zT0Of87njUJDU/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="182" data-original-width="1071" height="67" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8rG3N6hHxh6YEQcHP_NzekEQ2psKc5jgdTtzXydxdXUTGkNJvavAzCOODPqU6aJttLKi9SZJBWtfoKBiyTBx0Nj51ixFDYhG4P0ADL4U4P4fL6NmXjNEAR8OookLkZ3zT0Of87njUJDU/s400/2.JPG" width="400" /></span></a></div>
<span style="font-family: Georgia, "Times New Roman", serif;">3. F<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-size: 14.66px; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">rom the results, click Bastion (preview)</span></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">4. On the Bastion (preview) page, click Create to open the Create a bastion page</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<span style="font-size: 10pt; line-height: 107%; margin: 0px;"><span style="background-color: transparent; color: black; display: inline; float: none; font-family: Georgia, "Times New Roman", serif; font-size: small; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">5. On the Create a bastion page, configure a new Bastion resource. Specify the configuration settings for your Bastion resource.</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzJ7BzoJPXWWrY68J051MDf96Z9rapSTfLE1QI1C87MgG3rxiyBGj7m6RYiaHiTguVzQc-7k-XEIGgCIqhiIc4mah3ENwAvj70RNkJakRNjKonTzfe_TzwPzRqv29eFE1FUEyNfiQQCzM/s1600/10.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="977" data-original-width="1015" height="385" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzJ7BzoJPXWWrY68J051MDf96Z9rapSTfLE1QI1C87MgG3rxiyBGj7m6RYiaHiTguVzQc-7k-XEIGgCIqhiIc4mah3ENwAvj70RNkJakRNjKonTzfe_TzwPzRqv29eFE1FUEyNfiQQCzM/s400/10.JPG" width="400" /></span></a></div>
<br />
<span style="font-family: Georgia, "Times New Roman", serif;">6. Provide all required information such as Name, Region, Virtual network information.</span><br />
<span style="font-family: Georgia, "Times New Roman", serif;">7. For Subnet, we have to create a new subnet with name "AzureBastionSubnet" (Azure can identify easily this for Bastion subnet, which is different from gateway subnet). there will be no NSG, route tables associated with this subnet.</span><br />
<span style="font-family: Georgia, "Times New Roman", serif;">8. Public IP address- Bastion required a public IP address to access RDP/SSH over 443, so create new Public IP address.</span><br />
<span style="font-family: Georgia, "Times New Roman", serif;">9. Review all the information and then click on create.</span><br />
</div>
<div class="separator" style="margin: 0px 0px 10.66px;">
</div>
<div style="margin: 0px 0px 10.66px;">
</div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;"><b>Create a Bastion host settings</b></span></div>
<div style="margin: 0px 0px 10.66px;">
</div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;"><span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">1. Go to in the </span><a href="https://portal.azure.com/?feature.canmodifystamps=true&Microsoft_Azure_Compute=flight17&Microsoft_Azure_HybridNetworking=flight3&microsoft_azure_marketplace_itemhidekey=bastionhostv2&microsoft_azure_compute_azbastion=true#home" style="-webkit-text-stroke-width: 0px; background-color: transparent; color: #0066cc; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: underline; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;">Azure portal - preview</a><span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"> only, and navigate the virtual machine and click on connect</span></span></div>
<div class="separator" style="margin: 0px 0px 10.66px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4PD9UzxfF2ZcWXGwenGq_BnZeZVyXNTwNFqLiWCYjjmbiBS7e8n6QVOsh5baAGtEKbPcCpS7Hk3sBSqal0FbavqjAv90qOZ4n6EBZuh-VvmZetqkDUvwLx51k4a4I2xKxfbZCoA3DvkI/s1600/5.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="480" data-original-width="1305" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4PD9UzxfF2ZcWXGwenGq_BnZeZVyXNTwNFqLiWCYjjmbiBS7e8n6QVOsh5baAGtEKbPcCpS7Hk3sBSqal0FbavqjAv90qOZ4n6EBZuh-VvmZetqkDUvwLx51k4a4I2xKxfbZCoA3DvkI/s400/5.JPG" width="400" /></span></a></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;">you can see there is no public IP assigned to a virtual machine </span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;">2. There are three options to connect the virtual machine, click on "Bastion" and "Use Bastion"</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj678e-2_LQZqJNncpqVyoMQK3j0DHJDVvXiWDD6ZzfOifYlfdQgQqEFWuugwlAiwBa1wwbVcI8RBJRR1Iy_GPQJVFnsFFG0Wt56lldeMpw_yvhZVzfmEvqtscl6dIVdwvAGOtDzbRUyuI/s1600/12.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="255" data-original-width="426" height="238" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj678e-2_LQZqJNncpqVyoMQK3j0DHJDVvXiWDD6ZzfOifYlfdQgQqEFWuugwlAiwBa1wwbVcI8RBJRR1Iy_GPQJVFnsFFG0Wt56lldeMpw_yvhZVzfmEvqtscl6dIVdwvAGOtDzbRUyuI/s400/12.JPG" width="400" /></span></a></div>
<div style="margin: 0px 0px 10.66px;">
<span style="font-family: Georgia, "Times New Roman", serif;">3. Now we will get the Bastion page and need to fill all the required information, such as subnet information, etc.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfnvtTEVAkuag1lSqu7n3X6OfphdA2TbAxXGMVnS7_2WxlpGgt-rCMhNotnlxxTKcqdnzo1YSNMrYcTADdSNSX4onxzqJd_8Qa9ihyphenhyphencHWfYIXCD5MGjgF_A71sfkLJFy2-sGbjzXC5qZA/s1600/13.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="550" data-original-width="588" height="373" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfnvtTEVAkuag1lSqu7n3X6OfphdA2TbAxXGMVnS7_2WxlpGgt-rCMhNotnlxxTKcqdnzo1YSNMrYcTADdSNSX4onxzqJd_8Qa9ihyphenhyphencHWfYIXCD5MGjgF_A71sfkLJFy2-sGbjzXC5qZA/s400/13.JPG" width="400" /></span></a></div>
<div style="margin: 0px 0px 10.66px;">
</div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;">4. Once complete the information, we will get another wizard for connecting the virtual machine</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioliW36n6OBRNnmMoJaHh7arBxKDU4fK9Vat3IxPAFdca46gcS-3Y1xlO7scztriPZD21osQiUAAHs8BEccNPO_xWjX0sxaMvjbczQY0brgFD3ZLK5K2DEMTUAgrv4uc0fvBqfg58Hyhs/s1600/6.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="545" data-original-width="437" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioliW36n6OBRNnmMoJaHh7arBxKDU4fK9Vat3IxPAFdca46gcS-3Y1xlO7scztriPZD21osQiUAAHs8BEccNPO_xWjX0sxaMvjbczQY0brgFD3ZLK5K2DEMTUAgrv4uc0fvBqfg58Hyhs/s400/6.JPG" width="320" /></span></a></div>
<div>
<span style="font-family: Georgia, "Times New Roman", serif;">5. Provide the credentials and click on connect, and a new browser will open with session initiation</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9dL_XYYpIyC2cLhA0iSHsJuuFFIAPL9SGyIJIratRZg5WBeujLLzU19yjmU4gsFOzsRAwIEq2SiB0KPjsFZoogZ9PdPXEUUaFeSskQIC3IurgeJUm9nnq0wqo0HUcz2TiyQ7Qv65D3k4/s1600/7.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="963" data-original-width="1600" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9dL_XYYpIyC2cLhA0iSHsJuuFFIAPL9SGyIJIratRZg5WBeujLLzU19yjmU4gsFOzsRAwIEq2SiB0KPjsFZoogZ9PdPXEUUaFeSskQIC3IurgeJUm9nnq0wqo0HUcz2TiyQ7Qv65D3k4/s400/7.JPG" width="400" /></span></a></div>
<div>
</div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;">6. Now you can see the successfully connect the virtual machine via RDP.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC3TunfJoHYn-k0nR_rVNY4n9W93gfcdctqeBFBHtG5U4PT6cwVur6smJ6e_h8-4zf00UzJTEvKKrYdH_cWnr_kUUbjIXnXwL12jVKHhkIBpARWk98aaYpHKb1kxxUqURNv2TQ5GT55Z4/s1600/8.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span style="font-family: Georgia, "Times New Roman", serif;"><img border="0" data-original-height="875" data-original-width="1600" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC3TunfJoHYn-k0nR_rVNY4n9W93gfcdctqeBFBHtG5U4PT6cwVur6smJ6e_h8-4zf00UzJTEvKKrYdH_cWnr_kUUbjIXnXwL12jVKHhkIBpARWk98aaYpHKb1kxxUqURNv2TQ5GT55Z4/s400/8.JPG" width="400" /></span></a></div>
<div style="margin: 0px 0px 10.66px;">
<br /></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;"><b>Pricing </b></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;">It will only be billed partially during public preview, for more details <a href="https://azure.microsoft.com/en-us/pricing/details/azure-bastion/">Azure Bastion Pricing</a></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: georgia;"></span></span></div>
<div style="margin: 0px 0px 10.66px;">
</div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: Georgia, "Times New Roman", serif;">References: <a href="https://azure.microsoft.com/en-us/blog/announcing-the-preview-of-microsoft-azure-bastion/">Microsoft Azure Bastion Services</a></span></span></div>
<div style="margin: 0px 0px 10.66px;">
<b><u><span style="color: #000120; font-family: Georgia, "Times New Roman", serif;"></span></u></b></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: Georgia, "Times New Roman", serif;"><iframe width="320" height="266" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/eLjuWG-L57Q/0.jpg" src="https://www.youtube.com/embed/eLjuWG-L57Q?feature=player_embedded" frameborder="0" allowfullscreen></iframe></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></div>
<div style="margin: 0px 0px 10.66px;">
<span style="-webkit-text-stroke-width: 0px; background-color: transparent; color: black; display: inline !important; float: none; font-style: normal; font-variant: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"></span></div>
<div style="margin: 0px 0px 10.66px;">
</div>
</div>
Dinesh Singhhttp://www.blogger.com/profile/00934944806001617572noreply@blogger.com8tag:blogger.com,1999:blog-3818269057978682536.post-17446631156951355842018-09-25T16:09:00.001-07:002018-09-25T16:09:31.772-07:00hello test<div dir="ltr" style="text-align: left;" trbidi="on">
hello</div>
Dinesh Singhhttp://www.blogger.com/profile/00934944806001617572noreply@blogger.com4