Any use cases for encrypting over Expressroute?

Question

I understand the basics of Expressroute being a private link from on-prem to Azure, but what would be the use cases to enable encryption on Expressroute via an Azure VPN gateway or a 3rd party gateway?

Thx

Answer 1

@Anonymous

For customers such as those in financial and health industries, double encryption over both their private WANs and Azure WAN is a key compliance requirement. VPN over ExpressRoute private peering allows customers to use IPsec tunnels over their ExpressRoute private peering to satisfy this need.

You can configure a Site-to-Site VPN to a virtual network gateway over an ExpressRoute private peering using an RFC 1918 IP address. This configuration provides the following benefits:

1. Traffic over private peering is encrypted.
2. Point-to-site users connecting to a virtual network gateway can use ExpressRoute (via the Site-to-Site tunnel) to access on-premises resources.

Please use this link for more information

Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.

Answer 2

TYVM for the info - greatly appreciated!