East-west traffic through Azure Firewall between spokes connected to different virtual hubs in the same virtual-wan

Question

Frank 1

If one has two virtual-hubs (vhub1 and vhub2) in one standard virtual-wan (vwan1). Vhub1 and vhub2 are automatically meshed.

Vhub1 is a secure hub and vhub2 is not. Vhub1 is configured to send all traffic through the Azure Firewall.

Will traffic from a spoke connected to vhub2 to a spoke connected to vhub1 (or vice versa) go through the Azure Firewall of vhub1?

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2022-03-05T04:00:15.05+00:00

Hello @Frank , On your secured hub, can you please confirm if Send via Azure Firewall under Private traffic is enabled? You can follow this documentation to find this setting on the portal.
Frank 1 Reputation point

2022-03-10T10:34:56.283+00:00

Hey @ChaitanyaNaykodi-MSFT ,

Thanks for your mail.

On the secure vhub1 the "Send via Azure Firewall" is enabled.

So will traffic from the spoke connected to non-secure vhub2 to the spoke connected to the secure vhub1 automatically go through the firewall in secure vhub1?
Or do I have to define an UDR on the spoke connected to the non-secure vhub2 that has the azure firewall in secure vhub1 as the next hop?

Your answer

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2022-03-05T04:00:15.05+00:00

Hello @Frank , On your secured hub, can you please confirm if Send via Azure Firewall under Private traffic is enabled? You can follow this documentation to find this setting on the portal.
Frank 1 Reputation point

2022-03-10T10:34:56.283+00:00

Hey @ChaitanyaNaykodi-MSFT ,

Thanks for your mail.

On the secure vhub1 the "Send via Azure Firewall" is enabled.

So will traffic from the spoke connected to non-secure vhub2 to the spoke connected to the secure vhub1 automatically go through the firewall in secure vhub1?
Or do I have to define an UDR on the spoke connected to the non-secure vhub2 that has the azure firewall in secure vhub1 as the next hop?