Having a scenario where have customer have many locations but only one connection to Azure. The connection is a standard Site-to-Site VPN configured in Azure. The drawback with this setup is that all connections to Azure must pass through main firewall where the Azure VPN connection is terminated.
Customer would like to connect the other locations directly to Azure. They are only using one Azure data center. We have been told that to do this we must change the VPN setup in Azure from Static (site-to-site) to dynamic. It is not possible to configure more then one (1) static VPN connection. The problem is that the Azure VPN connection for Multi-Site VPN uses IKEv2 and not all firewalls (or VPN gateways) support IKEv2. That goes also for many major brands and newer models.
Are there any other possible configurations to make this work ? Is it possible to configure more then one static VPN connection Azure ? Or do I have to tell the customer to replace the firewalls with ones supporting IKEv2 or adding seperate VPN gateways for this purpose ?