docs: Replace Bastion deployment with NSG note and remove public IP

Author: asudbring

articles/application-gateway/quick-create-portal.md

@@ -5,7 +5,7 @@ description: In this quickstart, you learn how to use the Azure portal to create
 services: application-gateway
 author: mbender-ms
 ms.author: mbender
-ms.date: 07/11/2025
+ms.date: 02/25/2026
 ms.topic: quickstart
 ms.service: azure-application-gateway
 ms.custom:
@@ -148,10 +148,9 @@ In this example, you'll use virtual machines as the target backend. You can eith
 To do this, you'll:
 
 1. Add a backend subnet.
-2. Deploy Azure Bastion for secure VM connectivity.
-3. Create two new VMs, *myVM* and *myVM2*, to be used as backend servers.
-4. Install IIS on the virtual machines to verify that the application gateway was created successfully.
-5. Add the backend servers to the backend pool.
+2. Create two new VMs, *myVM* and *myVM2*, to be used as backend servers.
+3. Install IIS on the virtual machines to verify that the application gateway was created successfully.
+4. Add the backend servers to the backend pool.
 
 ### Add a backend subnet
 
@@ -169,35 +168,6 @@ To create a backend subnet:
 
  ![Screenshot of new application gateway subnets.](./media/application-gateway-create-gateway-portal/application-gateway-subnets.png)
 
-### Deploy Azure Bastion
-
-Azure Bastion uses your browser to connect to VMs in your virtual network over secure shell (SSH) or remote desktop protocol (RDP) by using their private IP addresses. The VMs don't need public IP addresses, client software, or special configuration. For more information about Azure Bastion, see [Azure Bastion](/azure/bastion/bastion-overview).
-
->[!NOTE]
->[!INCLUDE [Pricing](~/reusable-content/ce-skilling/azure/includes/bastion-pricing.md)]
-
-1. In the search box at the top of the portal, enter **Bastion**. Select **Bastions** in the search results.
-
-1. Select **+ Create**.
-
-1. In the **Basics** tab of **Create a Bastion**, enter, or select the following information:
-
-    | Setting | Value |
-    |---|---|
-    | **Project details** |  |
-    | Subscription | Select your subscription. |
-    | Resource group | Select **myResourceGroupAG**. |
-    | **Instance details** |  |
-    | Name | Enter **bastion**. |
-    | Region | Select the same region as your application gateway. |
-    | Tier | Select **Developer**. |
-    | **Configure virtual networks** |  |
-    | Virtual network | Select **myVNet**. |
-
-1. Select **Review + create**.
-
-1. Select **Create**.
-
 ### Create a virtual machine
 
 1. On the Azure portal menu or from the **Home** page, select **Create a resource**. The **New** window appears.
@@ -217,6 +187,9 @@ Azure Bastion uses your browser to connect to VMs in your virtual network over s
 8. On the **Review + create** tab, review the settings, correct any validation errors, and then select **Create**.
 9. Wait for the virtual machine creation to complete before continuing.
 
+> [!NOTE]
+> The default rules of the network security group block all inbound access from the internet, including RDP. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../bastion/quickstart-host-portal.md).
+
 ### Install IIS for testing
 
 In this example, you install IIS on the virtual machines to verify Azure created the application gateway successfully.