Managing AVD session hosts using Azure Bastion
In this section, we will look at Azure Bastion as an additional layer of security for accessing VMs securely through an HTML5 browser within the Azure portal.
What is Azure Bastion?
Azure Bastion is a platform-managed service that enables admins to connect to VMs in Azure using their web browser. The service makes it easy to connect securely to your VMs directly from the Azure portal over a transport layer security (TLS) connection. Azure Bastion also removes the need for public IPs or remote desktop services ports to open on your NSGs for the internet.
When using Azure Bastion, you use the Azure portal to connect the VM, which is essentially an HTML5 TLS connection. The Bastion deployment then connects to the resources securely inside the VNet using RDP or the Secure Shell (SSH) protocol, depending on the VM remote protocol requirement.
Important note
Azure Bastion uses port 443
; ensure that you configure the NSG for this...