Thank you for reaching out.
I understand you are trying to access an Azure Web App from a remote location using an Azure VPN connection. You have already whitelisted the P2S IP address pool on the app service access restrictions, but they are still getting a 403 forbidden error.
You can try below mentioned steps and see if that helps in resolving the issue.
- You can check if any NSG in the virtual network is blocking this issue as this might give 403 forbidden error.
- If possible and to try and isolate the issue you can try and deploy a VM in your Hub Vnet and try to access the web-app and see if there is any issue. If you are still facing the issue, we can rule VPN Gateway out and visa-versa. You can use Azure Network Watcher IP flow verify to test the connectivity which will let you know if any NSG is blocking the connectivity.
- If connection from the VM above is successful, you can check if any firewall from the client machine is blocking the communication and doing a packet capture on your VPN Gateway can also help with the issue.
Hope this helps! Please let me know if you have any questions. Thank you!
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.