vMX is probably the simplest way, and I suspect there is a way to give it a static IP even if not to the resource directly...you could also co-locate a physical MX in a datacenter, use it as VPN hub for emergencies. Third option off the top of my head would be to provision a Windows Server VM in Azure with a public IP, give it a Terminal Services license for more than 2 concurrent users, and have people RDP into that in an emergency to access the dashboard. For extra security, you could use Azure's Bastion Host feature to have people access the VM through Azure authentication in a web browser instead of RDP. [edit] The last, and least recommended option would be, if you don't have API access ACL'd, you could use an API script to remove the dashboard IP restrictions temporarily in an emergency.
... View more