Well, in my opinion, it's a way for you to route traffic to machines that you have on Azure without having to create a VPN tunnel for each branch. You can concentrate all routing on the hub and branches would have routes via SD-WAN. Of course, this is in case you don't want to publish these servers to the internet.
... View more