VMX

[robfromsc]

While deploying a Azure VMX is it best practice to deploy a firewall in front of the VMX?  I currently have a 0 trust network with firewalls behind the vmx but I see conflicting information on deploying a firewall in front of the vmx. 

[MattJ]

Hi @robfromsc 

What are you trying to achieve with this VMX? VMXs are typically used as VPN endpoints for Client VPN and S2S VPN Tunnels. If you have resources in Azure you want remote users or sites to access securely you can set up a VMX and have them access these resources via a VPN. Since resources are accessed in this way it is inherently secure, so you wouldn't need to put a firewall in front of a VMX.

[PhilipDAth]

I rely on a simple Azure network security group.  It is a security appliance in its own right.