Secure Azure VMs with Private Subnets: A Step-by-Step Guide

In this video, we dive into Azure’s new Private Subnets virtual network feature, which brings greater security and control to your Azure VMs. Starting in September 2025, Microsoft will disable default internet access for Azure VMs, impacting organizations relying on direct outbound internet connections. Please join me as we walk through how Private Subnets enable explicit internet configuration, reducing security risks by ensuring VMs don’t bypass organizational firewalls and content filters without authorization.

Follow along as we create a private subnet on an Azure VNet in the Azure Portal, move a VM into it, and test internet connectivity to see firsthand how the feature restricts access without a defined NAT gateway or other route. Perfect for Azure admins and cloud architects, this tutorial ensures you’re prepared for upcoming changes and better VM security in Azure.

00:00 – Start
02:13 – Default Outbound Access
03:20 – Add a Private Subnet
03:51 – Change a VM Subnet
04:34 – No Default Outbound Access

Links
Free Azure guide! Subscribe to the newsletter
https://subscribepage.io/rbsIjt

Zero to Hero with Azure Virtual Desktop
https://www.udemy.com/course/zero-to-hero-with-windows-virtual-desktop/?referralCode=B2FE49E6FCEE7A7EA8D4

Hybrid Identity with Windows AD and Azure AD
https://www.udemy.com/course/hybrid-identity-and-azure-active-directory/?referralCode=7F62C4C6FD05C73ACCC3

Windows 365 Enterprise and Intune Management
https://www.udemy.com/course/windows-365-enterprise-and-intune-management/?referralCode=4A1ED105341D0AA20D2E

Default Internet Access Announcement
https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-transition-to-a-new-method-of-internet-access/?WT.mc_id=AZ-MVP-5004159

Default Internet Access Video
https://youtu.be/IUZA2sBQsPk