Skip to content

Latest commit

 

History

History
30 lines (17 loc) · 1.23 KB

04-secured_hub.md

File metadata and controls

30 lines (17 loc) · 1.23 KB
Raw

Challenge 4: Secured Virtual Hub

< Previous Challenge - Home - Next Challenge >

Introduction

This challenge will introduce you to secured virtual hubs. These are Virtual WAN hubs where an Azure Firewall is deployed into. Routing can then be configured to ensure Azure Firewall can be leveraged to restrict traffic.

Description

Convert both of your Virtual WAN hubs to secured hubs. Configure routing and ensure the following flows go through Azure Firewall:

  • VNet-to-VNet in the same hub (aka VHV)
  • VNet-to-Branch in the same hub (aka VHB)
  • VNet-to-Internet (aka V2I)

Note: today secured hubs don't support VHHV or VHHB traversing the firewall

Sample topology:

topology

Success Criteria

  • Prove that certain traffic (e.g. ping, SSH or HTTP) is either blocked by the firewall or allowed through. Confirm this for each of the configured flows (VHV, VHB and V2I)

Learning Resources