Unable to access P2S VPN resources after disabling SNAT in Azure Firewall

Ijaz Muhammad, Gnrgy 21 Reputation points

hub n spoke

I have configured Point-to-site VPN connection. I configured the network in HUB and Spoke architecture, and Hub and Spoke is peered .

Also, I have disabled SNAT in Azure Firewall. When it was enabled, we didnt face any issues. We disabled SNAT to preserve the source IP.

In Hub, I have Azure firewall. So my question is that when I connect VM to the Spoke Vnet I couldn't take SSH to that VM, but I have ping and telnet to the SSH port of this VM. I have configured the Azure Route table (Propagate gateway routes: YES).

Upon checking firewall logs, it shows that traffic is allowed.
Could you explain why I couldn't connect to spoke Vnet resources over ssh, when I disabled SNAT?

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,242 questions
{count} votes