Hi all, just a quick question. With UDR and IP forwarding we can configure traffic of a subnet to flow through an appliance (like a virtual firewall). However, it seems like that we cannot control the inbound traffic: If that’s really the case, it makes
the solution almost useless… Especially for scenarios where a virtual Firewall should protect servers within a azure vnet. That´s no issue on-premise of course as the customer can fully control the routing to and from the firewall device. Did I miss anything?
Is there a workaround? I guess I miss something… The same limitation applies obviously also to express route connections (just outgoing can be forwared through the vFirewall while ingoing will be transferred over the azure gateways… And usually the customer
needs deep packet inspection in both directions.. Thanks!
↧