Try our new research platform with insights from 80,000+ expert users

Azure Bastion vs Azure DDoS Protection comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.8
Azure Bastion offers significant savings and seamless infrastructure automation, though some users don't see specific cost or time benefits.
Sentiment score
7.2
Azure DDoS Protection offers cost-effective security for public IPs, benefiting users with ROI despite varying enterprise costs.
We have noticed savings of approximately twenty percent by using Azure Bastion compared to VM pricing.
 

Customer Service

Sentiment score
7.0
Azure Bastion's customer service is efficient and patient, with positive ratings, though some improvements are needed in data transfer.
Sentiment score
6.3
Educational institutions commend Azure DDoS Protection's swift support, while others experience slower response times affecting satisfaction.
Support is satisfactory but with room for improvement, primarily concerning data transfer issues.
We usually get backup within two hours.
The response time is very slow, especially when multiple teams are required to collaborate on a case.
 

Scalability Issues

Sentiment score
6.6
Azure Bastion offers scalability for extensive use but lacks customization, meeting diverse organizational needs with varying user exploration.
Sentiment score
6.9
Azure DDoS Protection excels in scalability and reliability, ideal for large enterprises, enhancing security in extensive environments.
It is designed to provide access over a private network without hitting the internet.
 

Stability Issues

Sentiment score
8.2
Azure Bastion is praised for stability and performance, with minimal issues, especially in North America, ensuring long-term reliability.
Sentiment score
7.6
Azure DDoS Protection is highly stable, rated 8/10, with minimal configuration issues and no downtime or false positives reported.
 

Room For Improvement

Azure Bastion users face data retrieval costs, limited functionality, browser issues, and call for improved protocol speed and AI support.
Azure DDoS Protection requires improved interface consistency, reporting, configuration simplicity, bandwidth optimization, enhanced services, and AI-driven auto-remediation.
I would like to see integrated AI features with Azure Bastion, especially for connectivity issues.
A storage solution must be created to transfer data, and this requires additional permissions like ACL or NFS.
It would be nice to have the capability to cut and paste across desktops, similar to old-fashioned Remote Desktop emulation.
Integrating more auto-remediation features with an AI engine would enhance its efficiency.
I have noticed some false positives with the Web Application Firewall yet not with DDoS Protection.
I suggest adding more services and additional services, which would be beneficial.
 

Setup Cost

Azure Bastion's pricing reflects its high-quality security, starting at $150/month, suitable for enterprises despite competitive alternatives.
Azure DDoS Protection offers expensive but comprehensive protection with trial, special pricing for education, and no extra fees for some uses.
Microsoft's pricing is on the higher side and could be more competitive.
The price is not necessarily cheaper, but it is acceptable.
If used with Front Door or Web Application Firewall, DDoS Protection is included without additional cost.
The pricing is somewhat costly, usually around $3,000 to $4,000 per month.
Compared to competitors, it is good.
 

Valuable Features

Azure Bastion offers secure VM access with Azure AD integration, avoiding public IPs, supporting scripting, and infrastructure as code.
Azure DDoS Protection offers seamless integration, robust security, and scalability, despite higher costs, providing significant ROI for vulnerable environments.
The security is the main reason we use Azure Bastion because it is integrated with Azure Active Directory, ensuring that access is secure.
We use Azure AD integration to specify who has access and what they can do.
Azure Bastion eliminates the need for a jump server by providing secure access to servers without hitting the public network.
The security architecture with Azure DDoS Protection is critical for safeguarding our financial organization's infrastructure.
The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective.
We can plug and play components to build applications or conduct research and development easily.
 

Categories and Ranking

Azure Bastion
Ranking in Microsoft Security Suite
19th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (24th), Remote Monitoring and Management (RMM) (6th)
Azure DDoS Protection
Ranking in Microsoft Security Suite
21st
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
8
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (8th)
 

Mindshare comparison

As of May 2025, in the Microsoft Security Suite category, the mindshare of Azure Bastion is 1.4%, down from 1.5% compared to the previous year. The mindshare of Azure DDoS Protection is 2.1%, down from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Aladin Steiner - PeerSpot reviewer
Has good scalability and provides secure access to the virtual machines
The product improved the security posture of our organization. We don’t have open ports and connect them to servers using it. We can carry out two-factor authentication to protect the devices with conditional access features. It would be nice to have a feature to copy and paste the files into servers. I rate the product a nine out of ten.
Venkat Raju Mallipudi - PeerSpot reviewer
Acts as an additional layer of protection, provides endpoint security but not very easy to configure
It's not very easy to configure, in my view. We have to do some work behind the scenes. It's not very simple. We have to do it very carefully, and we need to monitor this enablement as well. But apart from that, I didn't see any kind of challenges. So, in my opinion, configuration is the main trouble for them. It is something that can be done to be better. Not just configuration. You need an expert who knows the ins and outs of these security solutions. In my experience, people struggle with configuration. While configuring, we get this error, we get that error, and then we try to fix those issues. I have seen those. It's not straightforward.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Government
9%
Financial Services Firm
8%
Manufacturing Company
7%
Computer Software Company
17%
Financial Services Firm
12%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Azure Bastion?
Azure Bastion makes it easy to provide quick virtual machine access to our customers.
What is your experience regarding pricing and costs for Azure Bastion?
The price is not necessarily cheaper, but it is acceptable. We are satisfied with the licensing on a yearly basis.
What needs improvement with Azure Bastion?
Azure Bastion does its job. However, it would be nice to have the capability to cut and paste across desktops, similar to old-fashioned Remote ( /products/remote-reviews ) Desktop emulation. I am u...
What do you like most about Azure DDoS Protection?
Azure DDoS Protection offers superior protection against denial-of-service attacks.
What is your experience regarding pricing and costs for Azure DDoS Protection?
The pricing is somewhat costly, usually around $3,000 to $4,000 per month. Managing this expense is tough, especially since we haven't received everything we need for our capital expenditure manage...
What needs improvement with Azure DDoS Protection?
The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces. It would be beneficial to have more detailed insights available directly on th...
 

Overview

Find out what your peers are saying about Azure Bastion vs. Azure DDoS Protection and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.