Create the on-premises virtual machine

This is a virtual machine that you use to connect using Remote Desktop to the public IP address. From there, you then connect to the on-premises server through the firewall.

1. From the Azure portal home page, select Create a resource.
2. Under Popular, select Windows Server 2016 Datacenter.
3. Enter these values for the virtual machine:
   • Resource group - Select existing, and then select FW-Hybrid-Test.
   • Virtual machine name - VM-Onprem.
   • Region - Same region that you're used previously.
   • User name: <type a user name>.
   • Password: <type a user password>.
4. For Public inbound ports, select Allow selected ports, and then select RDP (3389)
5. Select Next:Disks.
6. Accept the defaults and select Next:Networking.
7. Select VNet-Onprem for virtual network and the subnet is SN-Corp.
8. Select Next:Management.
9. For Boot diagnostics, Select Disable.
10. Select Review+Create, review the settings on the summary page, and then select Create.

 Note

Azure provides a default outbound access IP for VMs that either aren't assigned a public IP address or are in the back-end pool of an internal basic Azure load balancer. The default outbound access IP mechanism provides an outbound IP address that isn't configurable.

For more information, see Default outbound access in Azure.

The default outbound access IP is disabled when either a public IP address is assigned to the VM or the VM is placed in the back-end pool of a standard load balancer, with or without outbound rules. If an Azure Virtual Network network address translation (NAT) gateway resource is assigned to the subnet of the virtual machine, the default outbound access IP is disabled.

VMs that are created by virtual machine scale sets in flexible orchestration mode don't have default outbound access.

For more information about outbound connections in Azure, see Use source network address translation (SNAT) for outbound connections.