Forum Discussion
Curtis_Hoyt
Nov 04, 2022Copper Contributor
Azure Secure Virtual Hub VNET-Branch Routing
Hey trying to get connectivity going from our VNET to Branch over the S2S VPN I've setup and from what I can tell when doing a tracert to an branch private ip address it seems to stop at the Azure Fi...
Kidd_Ip
Nov 01, 2025MVP
Would suggest this:
- Update Route Table Propagation:
- Enable propagation from VPN Site to the default route table.
- Add Network Rule in Firewall Policy:
- Allow traffic from VNET subnet to Branch subnet.
- Verify Branch Firewall/Router Rules:
- Ensure it allows traffic from Azure Firewall’s SNAT IPs.
- Test with Logging:
- Enable diagnostic logging on Azure Firewall to trace dropped packets.