Hi Jaroslav,
Welcome to Q&A.
There are 2 options (as of today at least):
- Use premium or dedicated with NAT gateway (like you are doing)
- Use App service Environment which is the Isolated tier of App service plan
Another option would be to whitelist the IPs of the region. A set of JSON is available:
Hope that helps.