Hi Community,
Our customer has a security layer subscription which they want to route and control all other subscription traffic via.
Basically, they want to remove direct VPeers between subscriptions and to configure Azure Firewalls to allow them to control and route all other subscriptions traffic. All internet traffic would then be routed down our S2S VPN to our Palo Alto’s in Greenwich for internet access (both ways).
However, there may be some machines they would assign Azure Public IP’s to for inbound web server connectivity, but all other access from external clients would be routed via the Palos inbound.
Questions:
- Which one (Azure Firewall or Azure WAN) would be best option?
- What are the pros and cons?
Any reference would be of great help.
