Logic Apps and VNET access without ISE ?

Hi JackK1870 ,

if you are looking for a cheap solution you could configure the firewall of the services that your logic app uses with the flag :

 - Allow traffic from azure data center or allow trusted microsoft services to access...

or for other services don't have this option you could put the logic apps outgoing ip addresses as allowed into the firewall ( those ip address ranges are publicly available , are static enough even if some ranges could be added in future ) .

Those two options will come with some security considerations and depending on your security requirements could enable you to connect logic app to other azure services  that are not totally public exposed.

For example the second option could be used with function apps that have vnet integration and you can reach out your on-prem data source using a function app in the middle .

Logic app -> Function app ( configure access restrictions and vnet ingration ) ->  on prem 

Or you can just use a function app instead of your logic app to reduce costs, even if is not suitable like logic apps to build workflows 🙂

Available for further discussion