Hi @Mloraditch Thank you so much for the response.
Can we atleast block the traffic destined for one VPN from going into another using S2S VPN Firewall feature? My filtering logic as below.
Source (Subnets accessing Azure application)- Destination (Azure hosts)- Permit Source (Subnets accessing Azure application)- Destination (any)- Deny
Source (Guest VPN subnet)-Destination (Azure hosts)- Deny
Source (Guest VPN subnet)-Destination (Any)- Permit
Basically i put more specific traffic higher in the rule order and more generic traffic lower. I am hoping this will block the unwanted traffic at the source, before it enters the tunnel. Will this arrangement work?