

Liked this post? Feel free to reach out to the Xello team for more hands-on guidance on how Azure Bastions can fit your setup. The reason for this is the level of separation it provides for administrative hosts within Microsoft Azure.Ĭombine this solution with Just in Time network access, and you can easily avoid using any internet facing hosts – all with platform native tools. That being said, this is easily one of my favourite ‘little releases’ of 2019 and I hope I can release this post as soon as possible.

Logging: Who accessed what, when and what did they do?.If you haven’t already guessed, Azure Bastion increase security in a number of different ways.


While these hosts do increase security, they come with a few drawbacks you need to maintain and harden them against vulnerabilities, and you need to pay extra to run them as they can possibly introduce more vulnerabilities.Īzure Bastion removes the need for this IaaS Virtual machine, simonizing your network footprint, maintenance overhead and allows you to get on with your day-to-day ops. In Microsoft high level architecture for protected services, you can see an IaaS Bastion Host in the bottom left corner. What is Azure Bastion?Īzure Bastion is designed to allow administrative access to a virtual machine without leaving the browser.
Azure bastion service how to#
Today’s blog post from our senior consultant James Auchterlonie will explain what Azure Bastion is, why you should use it, and how to deploy the service in your business. In short, for remote VM access directly in your web browser and private virtual machine access, it’s awesome and well worth looking into. With Azure Bastion finally being announced and released to public preview, we’ve had Bastion for a while and are keen to share our impressions of its capabilities. One of the many benefits of partnering with Microsoft is that occasionally Xello gets to see, explore and put to the test upcoming products and services ahead of time.
