A VM that is accessible to everyone is worse than having no VM at all. In this section, you will learn how VMs in Azure can be secured and how to enhance and use their security features. We will also discuss the proper security approach when it comes to designing network topologies.
To get started, you will need a VM deployed in your subscription. To create a new one, please reference the Adding data disks section of this chapter. The feature described in this section works for both Windows and Linux machines, so do not worry and select whichever you prefer to work with.
By default, when a VM is created in Azure, there is no way to access it – all the ports are closed for both inbound and outbound connections. You can find confirmation of this when creating a machine directly from the Azure portal:
Figure 6.17 – Information about ports blocked by default
This means that you will not be able to access both a Windows machine...
