Azure VMware Solution “Ingredients”: Secure Communications Between AVS and On-Premises Using On-Premises Firewall

Use Case

Communications between the Azure VMware Solution private cloud and the on-premises environment is secured with an on-premises firewall.  This architecture can be implemented when a VPN or ExpressRoute is used to connect to Azure.

General Information

• There are others way to secure communications between on-premises and AVS, but this is by far the easiest and most straight forward design to implement.
• All appropriate ports must be opened to communicate with components of AVS; refer to this link for details. https://docs.microsoft.com/en-us/azure/azure-vmware/tutorial-network-checklist#required-network-ports

Implementation and Configuration

1. There are no specific items in Azure which need to be done to configure or implement this design.  All configurations are done to the on-premises firewall.