Azure firewall with vmx100

[Derekjr]

Hello,

 We currently have the following setup and are looking into using Azure Firewall.

MX250 STS VPN  that is connected to a  vMX100 in Azure. Can we put an azure firewall in-line with this setup?

Can anyone share their experiences?

Thanks,

Derek

[Inderdeep]

@Derekjr : The vMX is a virtual MX - Which is an SDWAN and a firewall device. Well you can add azure firewall in-line of course. 

https://www.youtube.com/watch?v=MljINqgmDkM  

[Derekjr]

@Inderdeep  So does it make sense to use the MX as a firewall? I am new to Meraki. I was asked to setup an azure firewall but if using the vmx makes more sense I can do that.

[Inderdeep]

@Derekjr : yes 

https://meraki.cisco.com/product/security-sd-wan/virtual-appliances/vmx-small/ 

https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Comparison_Datasheet 

[Derekjr]

 so this is where i would set up the rules?

[Derekjr]

So will i be able to use it as a firewall if it is any of these modes?

[Derekjr]

So I think I have wrapped my head around this a bit more.  I have set up Client VPN on the vmx100.  I don't want to set up a split tunnel, so I will add the azure firewall as the next hop so it will route internet traffic and internal traffic.

Does this sound correct? I know the vmx100 does not support full tunnel.