Accessing azure web apps through P2S VPN connection

Muhammad Zeeshan 246 Reputation points
2023-08-14T16:00:33.93+00:00

I have an Azure Web App which i want to connect to from a remote location. I use Azure VPN to connect to my Hub Network via Azure P2S connection using Azure VPN gateway.

Hub and the destination network has vnet peering enabled .

I have already whitelisted the P2S ip address pool on the app service access restrictions.

I am still getting 403 forbidden error.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,795 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,968 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator
    2023-08-15T07:37:54.7+00:00

    @Muhammad Zeeshan

    Thank you for reaching out.

    I understand you are trying to access an Azure Web App from a remote location using an Azure VPN connection. You have already whitelisted the P2S IP address pool on the app service access restrictions, but they are still getting a 403 forbidden error.

    You can try below mentioned steps and see if that helps in resolving the issue.

    • You can check if any NSG in the virtual network is blocking this issue as this might give 403 forbidden error.
    • If possible and to try and isolate the issue you can try and deploy a VM in your Hub Vnet and try to access the web-app and see if there is any issue. If you are still facing the issue, we can rule VPN Gateway out and visa-versa. You can use Azure Network Watcher IP flow verify to test the connectivity which will let you know if any NSG is blocking the connectivity.
    • If connection from the VM above is successful, you can check if any firewall from the client machine is blocking the communication and doing a packet capture on your VPN Gateway can also help with the issue.

    Hope this helps! Please let me know if you have any questions. Thank you!


    ​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.