Azure Bastion

Azure Bastion is a managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses.

Features include:

• Direct connection for RDP and SSH sessions in the Azure Portal with a single click
• Support without the need for an agent in a VM or additional software on a browser
• Integration of existing firewalls and security perimeters using a modern HTML5-based web client and standard SSL ports
• Scalability to manage additional concurrent SSH and RDP connections

The solution allows users to access all virtual machines within a local or peered virtual network through a single hardened access point. No public IP address is required on VMs—using a Bastion host lets users open a more secure RDP/SSH connection using a private IP address.