Connecting the local MX with our servers on azure

[AhmedGharib]

Dears,

I am new to Meraki and not security specialized, I have a project 4 sites every site have its own network MX firewall, MS core switch, and the APs the wireless users suppose to connect their server on Azure, we also have an active directory on Azure and backup active directory locally at the site.

I need your support guys to explain what to do step by step to make sure the users connect their services on Azure.

Thanks in advance

[PhilipDAth]

If you lack the networking skills it is probably easier for you to buy a Meraki vMX, which is a virtual appliance you can install into Azure.  It removes a lof of the complexity.

https://meraki.cisco.com/products/appliances/vmx100

[AhmedGharib]

I have already MX68 for each site and all of them need to connect servers on Azure to is it possible?

We do not have VPN between the sites only between each site and the server on Azure

[PhilipDAth]

Yes it is possible using the vMX which I previously posted about.

[AhmedGharib]

But I cannot go for vMX, I have already 4 sites each site MX68, do i will face any problem to access my active directory on Azure cloud?

FYI each site will be configured static route to the internet and no site to site VPN

[PhilipDAth]

If you use AzureAD - then you don't need anything else, as that runs over the Internet.

If you use an actual AD controller in Azure - then you will need a VPN to get access to it.

[AhmedGharib]

Thanks i appreciate your assistance 

[wey2go]

Meraki MX does not support IKE V2. So, connecting to Azure without using vMX is a pain in the ^#$#@$%@.

I look after the Australian branch of a multi-national company. All their other sites do not use Meraki and the Australian branch is the only one that uses an MX. I had no choice but to configure the MX as Passthrough and put an old SonicWall between the WAN link and MX to establish a VPN link to Azure.

Using a vMX is not an option on cost reasons as we are the only site requiring that out of over 50 sites.

Where is IKE V2 support for MX? Still waiting ....