Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
593 questions
2 answers
Express Route and Azure Firewall
We have express route to on-prem and it is working fine. We are in the process of implementing Az Firewall but are having trouble getting the routing right. I know you cannot add routes to the Express Route subnet so how do we force traffic that…
asked 2022-05-23T14:06:36.88+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 35%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MDavis
26
Reputation points
edited a comment 2024-06-29T00:07:49.32+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 67%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Jaykishan Bairagi
0
Reputation points
1 answer
One of the answers was accepted by the question author.
Since we ahve primary data center (DC) is already connected to Azure via ExpressRoute, options for connecting your on-premises DR datacenter to Azure
We have DC and DR datacenters at the on-prem level and the On-prem datacenter was connected to Azure through the Azure Express route and What are the other options we can get to connect Azure to the on-prem DR datacenter, how to establish connectivity…
asked 2024-06-20T17:31:14.1433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 85%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Sathish S
20
Reputation points
commented 2024-06-28T22:19:28.22+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
24,231
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
routing tables on Express router and virtual network gateway
The express route table contains the prefixes on-prem and Azure vnets. The route table summary shows the bgp neighbors which live in GatewaySubnet. This clearly explains the routes from on-prem to Azure cloud. But the route table associated with…
1 answer
UDR or Routetable pointing to multiple VNG's
Scenario : I have a GatewaySubnet with a VNG for a 3rd party vendor VPN solution and a VNG for ExpressRoute I need to create a RouteTable for the Resource Subnets with entries for Internet access and the VPN Subnet (Assumption is that the VNG for…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 39%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 45%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAW%3C/text%3E%3C/svg%3E)
2 answers
bgp neighbor IP address in express route table
After a vnet is peered with the vnet with express router, the express route table has some bgp routes with ASN 65515. For those routes, how can I know where the next hop points ? How does Azure assign these IPs ? thanks !!!
asked 2024-06-14T04:12:21.08+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 71%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGY%3C/text%3E%3C/svg%3E)
Gongya Yu
150
Reputation points
answered 2024-06-18T09:35:46.9133333+00:00
KapilAnanth-MSFT
38,971
Reputation points Microsoft Employee
1 answer
How are the vnet subnets propagated to on-prem via express router ?
via vnet peering ?
asked 2024-06-14T15:29:12.8066667+00:00
Gongya Yu
150
Reputation points
commented 2024-06-18T07:21:24.64+00:00
GitaraniSharma-MSFT
49,001
Reputation points Microsoft Employee
3 answers
One of the answers was accepted by the question author.
Really like to know what the next-hop IP points to for ASN 65515 in Azure express route !!!!
What do IPs in red point to ? thanks !!
1 answer
Expressroute BGP advertising issue
We attempted to configure Expressroute between our site and MSEE Circuit. Everything seemed to go well but only the vNET for the Expressroute gateway was advertised back to our switch and not any of its peers. I believe the issue is related to the…
1 answer
Transitioning to Expressroute from Meraki MX SiteToSite Routing question
I have been running a Meraki Site To Site VPN setup using MX on prem and VMX in Azure to connect our on prem environment to Azure. This includes having some Route Tables setup using the Virtual appliance as the next hop with associated subnets. We are…
asked 2024-06-07T20:31:39.6633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 2%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA0%3C/text%3E%3C/svg%3E)
azure-000
1
Reputation point
commented 2024-06-11T15:38:31.1766667+00:00
ChaitanyaNaykodi-MSFT
24,231
Reputation points Microsoft Employee
1 answer
If public IP address associated with the ExpressRoute gateway becomes unavailable will it impact the ExpressRoute circuit traffic
If public IP address associated with the ExpressRoute gateway becomes unavailable, will it impact only internal mgmt traffic or will it also affect the the ExrpessRoute circuit traffic.
asked 2024-06-05T11:53:25.5633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 46%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPG%3C/text%3E%3C/svg%3E)
Paskauskas,G,Giedrius,JSHD1 R
0
Reputation points
commented 2024-06-06T14:56:25.6133333+00:00
Paskauskas,G,Giedrius,JSHD1 R
0
Reputation points
1 answer
One of the answers was accepted by the question author.
steps to establish network connectivity between vmc aws to avs
We are planning to migrate the workloads from vmc on aws to avs and we are looking for detailed steps to establish network connectivity between to aws to avs. Thanks in advance.
asked 2024-06-03T17:58:13.2166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 20%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Murli
60
Reputation points
edited the question 2024-06-05T10:43:10.7966667+00:00
KapilAnanth-MSFT
38,971
Reputation points Microsoft Employee
1 answer
Physical Express Route Link Migration
Trying to migrate the Express route circuit from an 1G physical circuit to 10G physical circuit. For migration, I'm trying to create a new circuit over the 10G link and create a new express route virtual network gateway. However, I'm getting the error…
asked 2024-05-30T20:36:24.02+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 75%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBI%3C/text%3E%3C/svg%3E)
Bharaniraj Iyyamperumal
0
Reputation points
edited the question 2024-06-05T09:56:57.84+00:00
KapilAnanth-MSFT
38,971
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azureとオンプレのプライベートピアリングについて
こんにちは。ExpressRouteでオンプレ環境とプライベート ピアリングを構築したいです。 その際、プライマリ サブネットとセカンダリ サブネットの回線を収容するオンプレ機器は、別々の機器を用意する必要があるでしょうか。 1台のSWにプライマリとセカンダリの回線を収容したいのですが、そのような構成は可能でしょうか。
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 21%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EI%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Express Route Gateway migration not working and throwing error "Gateway subnet needs two or more address prefixes for migration"
Express Route Gateway migration not working and throwing error "Gateway subnet needs two or more address prefixes for migration"
asked 2024-05-20T07:01:47.92+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 79%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
sunil cherukuri
20
Reputation points
commented 2024-05-20T12:03:22.6466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 24%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
akinbade abiola
6,420
Reputation points
1 answer
ExpressRoute with Azure routing question
Hi guys, I currently have ExpressRoute setup (Diagram), and it's been working fine. Except for one thing: all traffic from Prod-VMs (VNET-VMs 10.10.0.0/16) to workstations at my company doesn't go through firewalls FW-01 & FW-02 in Azure. However,…
asked 2024-05-09T23:17:53.3233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Shane DT
60
Reputation points
commented 2024-05-20T04:32:19.1133333+00:00
KapilAnanth-MSFT
38,971
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure support for TLS 1.0 and TLS 1.1
Microsoft released the following announcement about TLS 1.0 and 1.1 end of support: https://azure.microsoft.com/en-us/updates/azure-support-tls-will-end-by-31-october-2024-2/ Old devices using TLS 1.0 (that cannot be upgraded) will continue to be able to…
asked 2024-05-13T20:30:03.7733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 31%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
Josue Gonzalez
65
Reputation points
edited the question 2024-05-13T22:22:15.9966667+00:00
Josue Gonzalez
65
Reputation points
1 answer
One of the answers was accepted by the question author.
In Express Route Circuit when metric type Arp and BGP Availability reaches 100% what it indicates. How can we identify and process the threshold or alert for this metrics.
In my Express route circuit while I am capturing the metrics I found the following type of metrics: Arp Availability and BGP Availability has showing 100%(Arp Availability (Avg)). So what is this impact on Express Route Circuit. If it reaches maximum…
asked 2023-10-04T10:23:45.8733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 26%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMY%3C/text%3E%3C/svg%3E)
Murarisetty Yamuna
80
Reputation points
commented 2024-05-08T09:38:41.85+00:00
GitaraniSharma-MSFT
49,001
Reputation points Microsoft Employee
0 answers
Long running operation failed when I changed library version
Hello, we used in our pod in this library: com.azure.resourcemanager:azure-resourcemanager-network:2.8.0 To use this API: ExpressRouteCircuitsImpl expressRouteCircuits expressRouteCircuits.inner().listRoutesTable(resourceGroupName, circuitName,…
asked 2024-05-02T14:29:04.8166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 0%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYM%3C/text%3E%3C/svg%3E)
Yahalom Maimon
0
Reputation points
edited the question 2024-05-08T04:09:10.48+00:00
GitaraniSharma-MSFT
49,001
Reputation points Microsoft Employee
0 answers
Azure Hub to Hub Vnet Peering
Dear Microsoft Q&A, I have a Hub & Spoke topology which includes 2 Hub & Spokes. When I attach route table to Express Route gateway /subnet, the injected routes are not being propagated to On-Prem network. Details: The objective is…
asked 2024-04-25T21:44:30.6866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 17%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bohac, Stanislav
0
Reputation points
commented 2024-05-03T20:57:28.82+00:00
ChaitanyaNaykodi-MSFT
24,231
Reputation points Microsoft Employee
0 answers
I have a BGP peer that cannot receive MD5 signature between Azure ExpressRoute and Cisco 8000V edge router?
I was working with Cisco on the BGP peer going down whenever there is any kind of hit/bounce, the peer does not recover. This scenario happens accross the two ExpressRoute circuits Primary/Secondary. The peering is between a Cisco 8000V to Azure…
asked 2024-04-24T12:57:21.01+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 93%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Dennis Slaughter
0
Reputation points
commented 2024-04-25T05:12:45.05+00:00
KapilAnanth-MSFT
38,971
Reputation points Microsoft Employee