Azure Virtual Desktop and Bastion

Question

I am playing around with my setup and currently have a Azure Virtual Desktop Environment setup. There are concurrent sessions setup on our Windows 10 instances as to facilitate staff working. I am looking to make it more secure and include Bastion in the process. Does Bastion facilitate multiple concurrent user sessions or is it restricted to one user per VM? I am trying to weigh the pros and cons of it

Answer 1

Hi Davis,

It can support multiple connections to the same host.

Bastion connectivity to Azure Virtual Desktop is not supported.

Source: https://learn.microsoft.com/en-us/azure/bastion/bastion-faq#peering

Bastion is aimed toward administration of IaaS VMs and not to facilitate end users work.

When you configure Azure Bastion using the Basic SKU, two instances are created. If you use the Standard SKU, you can specify the number of instances. [...] Each instance can support 10-12 concurrent RDP/SSH connections. The number of connections per instances depends on what actions you are taking when connected to the client VM. For example, if you are doing something data intensive, it creates a larger load for the instance to process. Once the concurrent sessions are exceeded, an additional scale unit (instance) is required.

source: https://learn.microsoft.com/en-us/azure/bastion/configuration-settings#instance

I do not believe that this is the product you are looking for.

You might want to consider using Azure Firewall and App Locker. May I suggest an excellent Learning Path : Deliver remote desktops and apps with Azure Virtual Desktop

https://learn.microsoft.com/en-us/learn/paths/m365-wvd/

Don't forget to mark this answer if it helped you.

Answer 2

Azure Bastion is only used for administrative purposes, you can't use it to provide user access to Azure Virtual Desktop - https://learn.microsoft.com/en-us/azure/bastion/bastion-faq#does-bastion-support-connectivity-to-azure-virtual-desktop

In terms of administrative access, you can have 10-12 concurrent sessions per instance of Azure Bastion across all of your VMs - https://learn.microsoft.com/en-us/azure/bastion/configuration-settings#instance