Important changes to default outbound access in Azure coming this September

On September 30^th 2025, new virtual networks will require the creation of explicit outbound connectivity methods for any Virtual Machine (VM).

At present, when you create a VM in Azure it automatically receives outbound internet access. Following the retirement of this functionality, VMs will require an alternative method of outbound connectivity.

Retiring this feature ensures that explicit decisions be made regarding outbound access, leading to greater control over your network traffic and public IP address usage, whilst ensuring better alignment with security and compliance requirements. Given outbound access is required for key functionality such as Microsoft licensing, and OS patching, outbound access will still be necessary, so it’s essential to plan ahead and adjust your configurations accordingly.

 

What This Means for Your Azure Environment

The upcoming change will only affect new Virtual Machines created from 30^th September onward. Existing VMs will continue to function as they do today, with no changes to their internet access. Plans to transition existing VMs to an explicit outbound method should however be made.

Options

There are several technical solutions available to provide internet access to your VMs. The best choice for your environment will depend on your specific needs, security requirements, and budget. Options include:

• Azure Firewall / Virtual Appliance
• NAT Gateway
• Instance level Public IP address
• Public Load Balancer

 

Each approach offers varying levels of control, security, cost-efficiency, additional functionality, and management overhead when compared to the existing functionality.

 

Will There Be Additional Costs?

Yes, but not necessarily much more. Costs vary depending on the solution chosen and the volume of network traffic in your environment. In many cases, opting for enhanced security or simplified management may lead to a modest increase in Azure costs, ranging from tens to hundreds of pounds a month.

 

How Can Ekco Support You?

We’re here to help. If you have questions or would like tailored advice on the best solution for your environment don’t hesitate to reach out. Our team is happy to work with you to find the right balance between security, performance, and cost.

If Ekco already manages your Azure environment, you don’t need to take any action. We’ll ensure your setup continues to function smoothly and securely. And if we’re unsure about your preferences, we’ll contact you directly to discuss the best path forward – ensuring your environment remains both secure and cost-effective.

Source: Microsoft will make changes that could impact your environment