Forum Discussion
Sentinel and Chinese branches
I've never personally tried this with a tenant in the China region, but you could attempt to create a service provider offering using lighthouse and see if you can associate the tenant with your EU tenant that way?
That's a major shot in the dark though. Unfortunately, with China and even US Government being physically separate data centers, you likely aren't going to be able to get any sort of connection between the China region and EU without doing some sort of continuous export to a middleware service and ingesting those alerts into sentinel in the eu. Not very cost effective if you have a lot of data in the Chinese sentinel, and certainly not easy to investigate.
For context, I previously worked for an MSP that had customers in azure commercial and azure gcc high. We tried to setup a relationship in one of our commercial test tenants with a gcc high tenant and failed. We had 60+ customers spread across the two regions and it would have been great to see everything in one pane, but no dice.
Unfortunately Lighthouse seems out of the games based on the latest point of these doc: https://learn.microsoft.com/en-us/azure/lighthouse/concepts/cross-tenant-management-experience#current-limitations. So MSSP/multitenat and Multi workspace incident view are cut out.
We can use 2 different Sentinel instances like having two separate customers or try with a VPN from China to HK (azure dc) and a forwarder in a HK vnet (figuring out the VPN licensing costs part before).
Setting up a middleware service should work, but i think that it would be complex for the amount of data we are talking about.
Thanks
