updating per feedback

Author: Blackmist

articles/machine-learning/tutorial-create-secure-workspace-vnet.md

@@ -402,6 +402,9 @@ Use the following steps to create an Azure Virtual Machine to use as a jump box.
 1. Once the virtual machine is created, select __Go to resource__.
 1. From the top of the page, select __Connect__ and then __Connect via Bastion__.
 
+    > [!TIP]
+    > Azure Bastion uses port 443 for inbound communication. If you have a firewall that restricts outbound traffic, ensure that it allows traffic on port 443 to the Azure Bastion service. For more information, see [Wroking with NSGs and Azure Bastion](/azuree/bastion/bastion-nsg).
+
     :::image type="content" source="./media/tutorial-create-secure-workspace-vnet/virtual-machine-connect.png" alt-text="Screenshot of the 'connect' list, with 'Bastion' selected.":::
 
 1. Provide your authentication information for the virtual machine, and a connection is established in your browser.