Microsoftdavidfrazee - thanks for the response.
Currently the firewall is also used to provide policies for outbound traffic. As such the VNet's default route is the firewall. Is the expectation that the firewall forward outbound requests to the NAT Gateway? In that case, what's the point of the firewall's public IP, or can it be removed? Also, what would prevent a malicious VM admin from circumventing the firewall and using the NAT gateway directly?
Further, in our case specifically we would need to ensure that it's compatible with our vWAN configuration (I saw a note in your linked tutorial about the design being incompatible with a "secure vWAN" and I'm unsure of the differences)
Thanks in advance 🙂
