Your company deploys Azure Bastion in a hub VNet to provide secure RDP/SSH access to VMs across peered spoke VNets. Administrators complain that they cannot connect to VMs from their local machines using the native Windows RDP client (mstsc), and they also cannot upload or download files during Bastion sessions. Your current deployment uses the Bastion Basic SKU. What must you do to enable both native client connectivity and file transfer?