Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,405 questions
Cloud/Intune managed devices - VPN or any other service to have users access resources from a single point?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 94%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHS%3C/text%3E%3C/svg%3E)
hitender singh
126
Reputation points
No on premise server/vpn
Basic office router
Two sites - India and Japan
Users are working from home
Devices are managed via Intune
Some of our clients give access to our employees into their environment but they can only whitelist access from single IP for us, since users are working from home and there is no single access point what solution can be recommended?
is there any Azure service that can help in this situation?
Thank you
{count} votes
-
Lu Dai-MSFT 28,356 Reputation points2021-04-29T07:39:37.457+00:00 @hitender singh Thanks for posting in our Q&A. This issue is more related to Azure. Maybe configure VPN gateway will meet the requirement.
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngatewaysGiven this situation, I will remove intune tag and add Azure tag. Thanks.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SaiKishor-MSFT 17,211 Reputation points2021-05-03T21:54:01.577+00:00 @hitender singh Thank you for reaching out to Microsoft Q&A.
I am not sure if I understand your requirement correctly. Do you want your employees that are working from home to access your client location or Azure Network? If you want them to access the Azure Cloud Services/VMs in Azure, then you can make use of the Azure P2S VPN for the remote users. Please let me know if you have different or additional requirement and I can assist further. Thank you!
-
hitender singh 126 Reputation points
2021-05-06T06:21:31.563+00:00 Thank you @SaiKishor-MSFT for your response.
Allow me to explain it further. Currently we have offices in two different countries and each user is working from Home. We have no on-premise infrastructure and devices are managed via Intune. We are using standard SMB routers at our office and procured a public IP from ISP. Now for an example, Our client has allowed/whitelisted our Office public IP in their network but users working from home cannot access client's resources since their own IP isn't allowed. Now what I am trying to achieve is, each machine should first connect to some sort of VPN service in azure and then if that machine access client's resource, client should only see the public IP of that service/loadbalancer or whatever that service could be. I hope that make sense :)
Azure P2S VPN would work for that? I appreciate your help :) -
hitender singh 126 Reputation points
2021-05-06T06:21:38.243+00:00 Machine (connected via own home internet) --> Azure VPN service or some sort --> Client see a static public IP address for each user
-
SaiKishor-MSFT 17,211 Reputation points
2021-05-06T19:03:58.647+00:00 @hitender singh Understand. Can you confirm where your client/clients are located? Azure network or outside?
If your client is outside of the Azure CLoud, I don't think there is anyway to connect to them from your clients machine via Azure. If your clients are in the Azure Cloud Network, then you can use Private links along with P2S VPN to acheieve this setup. Here is an example of a similar setup.
Please let me know. Thank you!
Sign in to comment