Azure Bastion could be improved with more granular session monitoring, rich audit capabilities, and deeper integration with security operation workflows. We would also appreciate enhanced reporting, stronger just-in-time access controls, and more flexibility for managing large-scale, multi-subscription environments from a centralized administration interface. One pain point in large enterprise environments is limited visibility into administrator session activity after access is granted through Azure Bastion. We would appreciate more advanced session recording, centralized audit reporting, and tighter integration with SIEM or SOC workflows to improve privileged access monitoring and forensic investigations.
Azure Bastion does its job. However, it would be nice to have the capability to cut and paste across desktops, similar to old-fashioned Remote ( /products/remote-reviews ) Desktop emulation. I am unsure if this is a configuration setting that we have wrong.
Lead Software Engineer at Glastechnische Industrie Peter LISEC GmbH
Real User
Top 10
Mar 12, 2025
There is room for improvement with AI features. I would like to see integrated AI features with Azure Bastion, especially for connectivity issues. Like Microsoft products that incorporate co-pilot, it would be useful to see troubleshooting steps.
I think the tool is pretty good. It is like having a tool that just works. If there are better tools that Azure comes up with, then that is a separate thing. In the current scenario, Azure Bastion is not a bad product. In my company, we are not facing any challenges or limitations with the tool. Speaking of AI, having Microsoft Copilot in Azure Bastion would be good. As of now, Microsoft Copilot is not something that has been considered for Azure Bastion. It would be a good addition if it is done in the future.
Implementation-wise, a little bit of improvement is required because the tips they have provided are a little bit tricky. There are some challenges because Bastion is more compatible with Edge but not with the other browsers. As an organization, it doesn't make sense that we have to use only Edge. We should be able to access Bastion over Chrome, Mozilla, or Opera. It should be our choice. A little bit of improvement is required for Linux because we can add Bastion on the Windows machine, but PuTTY is implemented for Linux. We have to log in to Bastion, and through that, we have to go to the PuTTY service.
Senior Microsoft System Engineer at a tech vendor with 201-500 employees
Real User
Jan 5, 2022
It's like an RDP gateway. It will let you access the virtual machines and have a full RDP experience. It's not full, however, for example, you cannot copy content inside, due to the RDP not being on the browser. It's HTML-based, where you cannot copy, for example, the full RDP experience to copy data from your computer to the server. That is the only limitation on the Azure Bastion. If we can copy content and drag and drop it on the HTML, this would be helpful. There's something called UDR on Azure. We cannot apply, as, when you deploy Azure Bastion, the networking part of the Azure Bastion, it needs a separate subnet for it. When you create the Azure Bastion, you need the subnet, like a network range for this subnet. The issue with that is you cannot manage this subnet on a way to control the traffic and to route the traffic from Azure Bastion, for example, to your firewall. Each virtual network should have its own subnet. This is maybe the problem. It's the networking part and applying the routing table on it that is where the issue lies. If they can make the Azure console, or the VM console, available on the Azure Bastion, so when you reboot the VM, you can still see what's happening during the reboot, maybe it will be better. You could even troubleshoot issues if you have boot issues on the virtual machine, which is not available in Azure Bastion, as Azure Bastion will just give you access when the VM restarts and when you have the login page of Windows. However, when the VM restarts, you will not have this visibility on what's happening on the reboot, and we face many issues in the boot. When you have a boot issue on Windows, you cannot use Azure Bastion to fix it. You have to use the Azure console or the VM console, and it is very limited. To make Bastion the best product as a management tool or an RDP tool, it will be better to bring the features of the hypervisor, local hypervisor, Hyper-V console, to Azure Bastion.
Managing Director at Evenor Info Solutions Pvt Ltd
Real User
Nov 15, 2021
This is a cloud-based solution. When we are dumping data into the cloud, it's free of cost. When we retrieve that data from the cloud, they require some amount of money. That is the main drawback of this cloud solution. You are charged for retrieving your own data.
Azure Bastion offers secure, browser-based access to Azure virtual machines, eliminating the need for public IPs by integrating Azure Active Directory and role-based access control for efficient and secure management.Azure Bastion provides a robust security layer for virtual machine access, leveraging Azure Active Directory for authentication while eliminating the need for traditional Jump servers. It streamlines permissions through role-based access control, enhancing administrative...
Azure Bastion could be improved with more granular session monitoring, rich audit capabilities, and deeper integration with security operation workflows. We would also appreciate enhanced reporting, stronger just-in-time access controls, and more flexibility for managing large-scale, multi-subscription environments from a centralized administration interface. One pain point in large enterprise environments is limited visibility into administrator session activity after access is granted through Azure Bastion. We would appreciate more advanced session recording, centralized audit reporting, and tighter integration with SIEM or SOC workflows to improve privileged access monitoring and forensic investigations.
Azure Bastion does its job. However, it would be nice to have the capability to cut and paste across desktops, similar to old-fashioned Remote ( /products/remote-reviews ) Desktop emulation. I am unsure if this is a configuration setting that we have wrong.
There is room for improvement with AI features. I would like to see integrated AI features with Azure Bastion, especially for connectivity issues. Like Microsoft products that incorporate co-pilot, it would be useful to see troubleshooting steps.
I think the tool is pretty good. It is like having a tool that just works. If there are better tools that Azure comes up with, then that is a separate thing. In the current scenario, Azure Bastion is not a bad product. In my company, we are not facing any challenges or limitations with the tool. Speaking of AI, having Microsoft Copilot in Azure Bastion would be good. As of now, Microsoft Copilot is not something that has been considered for Azure Bastion. It would be a good addition if it is done in the future.
We are not able to copy and paste files directly into the server over the patch host. We have to transfer files over to Azure Storage.
The solution breaks down sometimes.
The protocol speed could be faster.
Implementation-wise, a little bit of improvement is required because the tips they have provided are a little bit tricky. There are some challenges because Bastion is more compatible with Edge but not with the other browsers. As an organization, it doesn't make sense that we have to use only Edge. We should be able to access Bastion over Chrome, Mozilla, or Opera. It should be our choice. A little bit of improvement is required for Linux because we can add Bastion on the Windows machine, but PuTTY is implemented for Linux. We have to log in to Bastion, and through that, we have to go to the PuTTY service.
It's like an RDP gateway. It will let you access the virtual machines and have a full RDP experience. It's not full, however, for example, you cannot copy content inside, due to the RDP not being on the browser. It's HTML-based, where you cannot copy, for example, the full RDP experience to copy data from your computer to the server. That is the only limitation on the Azure Bastion. If we can copy content and drag and drop it on the HTML, this would be helpful. There's something called UDR on Azure. We cannot apply, as, when you deploy Azure Bastion, the networking part of the Azure Bastion, it needs a separate subnet for it. When you create the Azure Bastion, you need the subnet, like a network range for this subnet. The issue with that is you cannot manage this subnet on a way to control the traffic and to route the traffic from Azure Bastion, for example, to your firewall. Each virtual network should have its own subnet. This is maybe the problem. It's the networking part and applying the routing table on it that is where the issue lies. If they can make the Azure console, or the VM console, available on the Azure Bastion, so when you reboot the VM, you can still see what's happening during the reboot, maybe it will be better. You could even troubleshoot issues if you have boot issues on the virtual machine, which is not available in Azure Bastion, as Azure Bastion will just give you access when the VM restarts and when you have the login page of Windows. However, when the VM restarts, you will not have this visibility on what's happening on the reboot, and we face many issues in the boot. When you have a boot issue on Windows, you cannot use Azure Bastion to fix it. You have to use the Azure console or the VM console, and it is very limited. To make Bastion the best product as a management tool or an RDP tool, it will be better to bring the features of the hypervisor, local hypervisor, Hyper-V console, to Azure Bastion.
This is a cloud-based solution. When we are dumping data into the cloud, it's free of cost. When we retrieve that data from the cloud, they require some amount of money. That is the main drawback of this cloud solution. You are charged for retrieving your own data.