Azure VPN Gateway P2S Internet connectivity

Paul Tippett 20 Reputation points
2023-10-18T14:01:24.2333333+00:00

We have deployed Azure VPN gateway with point to site configruation. Internet on the endpoint works fine but we have a couple of applications which we need to tunnel through our corporate internet connection (the IP addresses are whitelisted for connectivity / security) reasons.

We would like to advertise the routes for these applications IP addresses through our P2S connection which we have done. However; we are unable to launch these applications (they fail, they are browser based), by default I assume internet access is not enabled or configured within Azure for a P2S conection. Is it possible to enable this and if so , how?

Thanks in advance

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,411 questions
{count} votes

Accepted answer
  1. ChaitanyaNaykodi-MSFT 23,731 Reputation points Microsoft Employee
    2023-10-20T02:33:18.9666667+00:00

    @Paul Tippett

    Thank you for getting back and sharing the required details.

    Based on my understanding from your architecture above, the public IP address assigned to your VPN Gateway cannot be used to route traffic to the internet, it is used to establish the VPN connection only.

    Based on your statement above

    We would like to remove the reliancy on Site 1 and go out to the internet through Azure.

    In order to achieve such connectivity, you can deploy an Azure Firewall on your Virtual Network in Azure so that the internet bound traffic from on-prem can routed the VPN connection to private IP of the Azure Firewall and then using SNAT the Firewall will direct the traffic to the Internet, something similar to this tutorial here.

    Azure Firewall provides SNAT capability for all outbound traffic to public IP addresses. Using Azure Firewall, you can enable access to internet.

    Additional reference:

    https://learn.microsoft.com/en-us/answers/questions/1249614/how-to-route-all-incoming-traffic-from-on-premise

    Hope this helps! Please let me know if you have any additional questions. Thank you!


    ​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful