Menu
Menu
In this lab, you will learn how to manually deploy and configure Azure Bastion to securely connect to a virtual machine in a virtual network without exposing the machine to the public internet. Azure Bastion provides secure and seamless RDP/SSH connectivity to your VMs directly from the Azure portal over SSL, without requiring a public IP address on the virtual machine. Throughout the lab, you will deploy a Bastion service, configure it to work with an existing virtual network, and test your configuration by securely connecting to a virtual machine.
This brief video explains what you’ll deploy, why it matters, and what steps you’ll take. Estimated watch time: 2 minutes 32 seconds
By completing this lab, you will be able to:
The skills you learn in this lab are necessary to pass the following Azure certification exams:
Watch the full instruction video in the Lab Instructions tab to unlock the Launch Lab Simulation button.
labITpro Supporters and other select subscriptions can jump straight into the lab without waiting for the video to finish.
Have a question about this lab? Ask The Author
Fast lookup for SKUs, deployment options, connectivity, host scaling & best practices.
| SKU | Deployment | Max Instances | Key Features |
|---|---|---|---|
| Basic | Dedicated | 2 (fixed) | Portal RDP/SSH |
| Standard | Dedicated | 50 | Host scaling, IP-based, native client |
| Premium | Dedicated | 50 | Session recording, Private-only |
| Developer | Shared | 1 | Free; Dev/Test only; limited features |
| Connection Type | Ports | Use |
|---|---|---|
| RDP | 3389 (default) | Windows VMs; portal or native client |
| SSH | 22 (default) | Linux VMs; portal or native client |
| Custom port | User-defined | Standard SKU+ only; non-standard RDP/SSH ports |
Fast lookup for orchestration modes, autoscaling, load balancing, updates & CLI.
| Mode | Profile | Best For |
|---|---|---|
| Flexible | Standard Azure VMs | New workloads (default) |
| Uniform | Identical VMs | Legacy large-scale workloads |
| Feature | Flexible | Uniform |
|---|---|---|
| Standard VM APIs | Yes | No |
| Mix instance types | Yes | No |
| RBAC per VM | Yes | No |
| Azure Backup | Yes | No |
| Site Recovery | Yes | No |
| Fault domains | 1–3 | 1–5 |
| Type | Layer | Best For |
|---|---|---|
| Internal LB | L4 | Backend pools |
| Public LB | L4 | External traffic |
| App Gateway | L7 | HTTP/HTTPS + WAF |
| Policy | Rollout | Use |
|---|---|---|
| Automatic | Batch | App can tolerate disruption |
| Rolling | Controlled | Gradual, managed updates |
| Manual | On-demand | Full control; explicit API calls |
Learn what you need to know to get started with Microsoft Entra ID with this easily-digestible 5-hour bootcamp from best-selling instructor, Thomas Mitchell.
Disable these ads by becoming a labITpro Supporter!
Want to learn about Azure virtual networks? In this quick-hitting explanation, you’ll learn what they are, what they do, and you’ll learn about key Azure vNet features.
Disable these ads by becoming a labITpro Supporter!
Want to know more about Azure VMs and all their settings? This brief micro-course takes you step by step through every option you’ll encounter when creating a Windows VM in Azure, so you know what it does and when to use it.
Disable these ads by becoming a labITpro Supporter!
