@Mike Kallies Thank you for reaching out to Microsoft Q&A. I understand that you are having challenges setting up traffic routing via the NVA.
First thing I notice from the architecture is that the NVA shares the subnets of the Trsut and Untrust networks. This is not the preferred setup for this requirement as this creates loops in routing. As per Microsoft documenation-
"Deploy a virtual appliance into a different subnet than the resources that route through the virtual appliance are deployed in. Deploying the virtual appliance to the same subnet, then applying a route table to the subnet that routes traffic through the virtual appliance, can result in routing loops, where traffic never leaves the subnet."
Here is a similkar architecture explained here in the following blog anf video:
https://rajanieshkaushikk.com/2020/01/12/how-to-route-network-traffic-in-azure/
https://www.youtube.com/watch?v=UeFDa3vl0LA
Please impelment a different subnet for the NVA and that should resolve this issue for you. Hope this helps.
Please let us know if you have any further questions and we will be glad to assist you further. Thank you!
Remember:
Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Want a reminder to come back and check responses? Here is how to subscribe to a notification.