RDP via Azure Bastion Support

[mm2knet]

Hi,

I am currently working with a really old ASG RD version. I am considering an update to a newer version but I need Azure Bastion to connect via RDP to my servers. Is there any support planned?

[DevOma]

Hi - currently not available - but we will check how to implement shortly

[DevOma]

Is there any need for customization? As I understand it - you need to install Bastion and configure it - then you use private IP for RDP / SSH - Bastion will manage how to redirect. That would mean there are no additional requirements?!?

[DevOma]

Ok read some info - Bastion is connecting in AZURE Portal via HTML5 - we will check how / what we can do

[mm2knet]

There are multiple ways to use Bastion. one is using a powershell and then it tunnels the rdp port via ssh over https to the client and an rdp client is able to connect to it by connecting to localhost:12345 (random upper port).
Check this: https://learn.microsoft.com/en-us/azure/...nt-windows

[DevOma]

Or you can use the Azure CLI to create a tunnel to your Bastion configuration - perhaps you can tell me some more details of what you are expecting?!?

[mm2knet]

I expect that I can create entries in the RDM database and my colleagues can double click on them and connect to Azure VMs using RDP without a VPN  between the client and the target environment. That's the short form.

Currently my colleagues have to install the AZ powershell modules on their machines (the RDM runs on a terminal server), run

Code:

az network bastion rdp --name "<BastionName>" --resource-group "<ResourceGroupName>" --target-ip-address "<VMIPAddress>"

and then they have to use the mstsc, which is automatically launched. This works but there is a reason why mstsc sucks when you need to connect to multiple maschines...

I want the RDM to store all needed informations and only the password for oauth to the bastion host should be asked for. Especially first level colleagues struggle to use the whole bastion thing.