Virtual WAN partners, regions, and virtual hub locations

This article provides information on Virtual WAN supported regions and partners for connectivity into a Virtual WAN hub.

There are two types of offerings that make connecting to Azure easier:

  • Network Virtual Appliances (NVAs) deployed in a Virtual WAN hub: Customers can deploy Network Virtual Appliances directly into a Virtual WAN hub. This solution is jointly managed by Microsoft Azure and third-party Network Virtual Appliance solution providers. To learn more about NVAs deployed in a Virtual WAN hub, see About NVAs in a Virtual WAN hub.
  • Branch IPsec connectivity automation: Customers can automatically configure and connect their branch devices to the Azure Virtual WAN Site-to-site VPN gateway using IPsec tunnels. These configurations are typically set up in the device-management UI (or equivalent).

Partners with integrated virtual hub offerings

Some partners offer Network Virtual Appliances (NVAs) that can be deployed directly into the Azure Virtual WAN hub through a solution that is jointly managed by Microsoft Azure and third-party Network Virtual Appliance solution providers.

When a Network Virtual Appliance is deployed into a Virtual WAN hub, it can serve as a third-party gateway with various functionalities. It could serve as an SD-WAN gateway, Firewall or a combination of both. For more information about the benefits of deploying an NVA into a Virtual WAN hub, see About NVAs in a Virtual WAN hub.

The following SD-WAN connectivity Network Virtual Appliances can be deployed in the Virtual WAN hub.

Partners Configuration/How-to/Deployment guide Dedicated support model
Barracuda Networks Barracuda CloudGen WAN deployment guide Yes
Cisco SD-WAN The integration of the Cisco SD-WAN solution with Azure virtual WAN enhances Cloud OnRamp for Multi-Cloud deployments and enables configuring Cisco Catalyst 8000V Edge Software (Cisco Catalyst 8000V) as a network virtual appliance (NVA) in Azure Virtual WAN hubs. View Cisco SD-WAN Cloud OnRamp, Cisco IOS XE Release 17.x configuration guide Yes
VMware SD-WAN VMware SD-WAN in Virtual WAN hub deployment guide. The managed application for deployment can be found at this Azure Marketplace link. Yes
Versa Networks If you're an existing Versa Networks customer, log on to your Versa account and access the deployment guide using the following link Versa Deployment Guide. If you're a new Versa customer, sign-up using the Versa preview sign-up link. Yes
Fortinet SD-WAN Fortinet SD-WAN deployment guide. The managed application for this deployment can be found at this Azure Marketplace Link. No
Aruba EdgeConnect Aruba EdgeConnect SD-WAN deployment guide. Currently in Preview: [Azure Marketplace link] (https://ms.portal.azure.com/#create/silver-peak-systems.aruba_edgeconnect_enterprise_in_vwan_apparuba_edgeconnect_enterprise_in_vwan_v1) No

The following security Network Virtual Appliance can be deployed in the Virtual WAN hub. This Virtual Appliance can be used to inspect all North-South, East-West, and Internet-bound traffic.

Partners Configuration/How-to/Deployment guide Dedicated support model
Check Point CloudGuard Network Security (CGNS) Firewall To access the preview of Check Point CGNS Firewall deployed in the Virtual WAN hub, reach out to DL-vwan-support-preview@checkpoint.com with your subscription ID. No
Fortinet Next-Generation Firewall (NGFW) To access the preview of Fortinet NGFW deployed in the Virtual WAN hub, reach out to azurevwan@fortinet.com with your subscription ID. For more information about the offering, see the Fortinet blog post. No

The following dual-role SD-WAN connectivity and security (Next-Generation Firewall) Network Virtual Appliances can be deployed in the Virtual WAN hub. These Virtual Appliances can be used to inspect all North-South, East-West, and Internet-bound traffic.

Partners Configuration/How-to/Deployment guide Dedicated support model
Fortinet Next-Generation Firewall (NGFW) To access the preview of Fortinet NGFW deployed in the Virtual WAN hub, reach out to azurevwan@fortinet.com with your subscription ID. For more information about the offering, see the Fortinet blog post. No

Branch IPsec connectivity automation from partners

Devices that connect to Azure Virtual WAN have built-in automation to connect. This is typically set up in the device-management UI (or equivalent), which sets up the connectivity and configuration management between the VPN branch device to an Azure Virtual hub VPN endpoint (VPN gateway).

The following high-level automation is set up in the device console/management center:

  • Appropriate permissions for the device to access Azure Virtual WAN Resource Group.
  • Uploading of Branch Device into Azure Virtual WAN.
  • Automatic download of Azure connectivity information.
  • Configuration of on-premises branch device.

Some connectivity partners may extend the automation to include creating the Azure Virtual hub VNet and VPN gateway. If you want to know more about automation, see Automation guidelines for Virtual WAN partners.

Branch IPsec connectivity partners

You can check the links in this section for more information about services offered by partners. If your branch device partner is not listed in the section below, have your branch device provider contact us. They can contact us by sending an email to azurevirtualwan@microsoft.com.

Partners Configuration/How-to/Deployment Guide
Barracuda Networks Barracuda CloudGen Firewall: Azure Virtual WAN
Check Point Check Point for the Microsoft Azure Virtual WAN Quick Start Guide
Cisco Meraki Azure Virtual WAN Cisco Meraki Deployment Guide
Citrix Using Citrix SD-WAN to connect to Microsoft Azure Virtual WAN
Cloudgenix CloudGenix Azure Virtual WAN CloudBlade Deployment Guide
Fortinet FortiGate and Microsoft Azure Virtual WAN Integration deployment guide,Routing Scenario Blog
HPE Aruba Aruba SD-WAN and Microsoft Azure Virtual WAN Deployment Guide
NetFoundry Netfoundry Support Hub: Azure Virtual WAN
Nuage/Nokia Nuage and Azure Virtual WAN Deployment Guide
Open Systems Open Systems and Azure Virtual WAN Deployment Guide
Palo Alto Networks Palo Alto Networks Azure Virtual WAN Deployment Guide
Riverbed Technology Azure Virtual WAN & SteelConnect EX
Silver-Peak EdgeConnect and Microsoft Azure Virtual WAN Integration Guide
VMware SD-WAN Azure Virtual WAN VMware SD-WAN Deployment Guide
Versa Configuring Versa SD-WAN and Microsoft Azure vWAN (Available for registered customers)

* Direct link unavailable. Please contact partner company for support.

The following partners are slated on our roadmap based on a terms sheet signed between the companies indicating the scope of work to automate IPsec connectivity between the partner device and Azure Virtual WAN VPN gateways: 128 Technologies, Arista, F5 Networks, Oracle SD-WAN (Talari), and SharpLink.

Available regions

Azure regions within a geopolitical region

Virtual WAN is available for the following regions:

Geopolitical region Azure regions
Australia Government Australia Central, Australia Central 2
Europe France Central, France South, Germany North, Germany West Central, North Europe, Norway East, Switzerland North, Switzerland West, West Europe, UK West, UK South
North America East US, West US, East US 2, West US 2, Central US, South Central US, North Central US, West Central US, Canada Central, Canada East
Asia East Asia, Southeast Asia
India India West, India Central, India South
Japan Japan West, Japan East
Oceania Australia Southeast, Australia East
South Africa South Africa North, South Africa West
South America Brazil South
South Korea Korea Central, Korea South
UAE UAE North, UAE Central

Azure regions and geopolitical boundaries for national clouds

Virtual WAN is available for the following regions:

Geopolitical region Azure regions
US Government cloud US Gov Arizona, US Gov Iowa, US Gov Texas, US Gov Virginia, US DoD Central, US DoD East
China East China East2
China North China North2

Next steps