Friday, March 27, 2020

ASA-5545 to Azure VPN

Hi everyone!

TLDR : Are there any caveats or hurdles that you ran into while provisioning a tunnel between Azure and ASA?


I am new to the whole cloud networking portion of this job, and recently was tasked with setting up a VPN between our datacenter and Azure. We have multiple offices that are currently connected via DMVPN and Meraki VPN that will require access to the Azure resources.

Currently, as a temporary solution to accessing Azure resources, we have a Meraki network leveraging a vMX100 in Azure and are accessing resources via a static route from our DMVPN network. So it seems to me that building a tunnel between our ASA and Azure might be a more traditional approach to this, the only thing I'm worried about is on this ASA we have a few other high visibility tunnels terminating on it, which makes our change window very tight.

Are there any caveats or hurdles that you ran into while provisioning the tunnel? The Microsoft documentation seems pretty well put together, but I find myself going down a lot of rabbit holes with it.

Thanks in advance for your input!



No comments:

Post a Comment