Azure does not support SHA2-384 or SHA2-512. Static VPN routes between your Firebox and Azure require IKEv2. On the Phase 1 Settings tab, select these settings: Site A static route configuration in Policy Manager Site A static route configuration in Fireware Web UI The VPN Routes tab of the BOVPN virtual interface configuration uses these settings: Site A gateway configuration in Policy Manager Site A gateway configuration in Fireware Web UI Remote Gateway: 198.51.100.2 (the IP address of the external interface on the Site B Azure gateway).

Local Gateway: 203.0.113.2 (the IP address of the external interface on the Site A Firebox).Azure supports only the pre-shared key authentication method for site-to-site VPNs. The Credential Method is Pre-Shared Key and must use the pre-shared key the two sites agreed upon.The Remote Endpoint Type is Cloud VPN or Third-Party Gateway endpoint type, which supports wildcard traffic selectors and does not use GRE.The Gateway Settings tab of the BOVPN virtual interface configuration uses these settings: Interfaceįor this example, the Microsoft Azure virtual network at Site B has one external virtual interface and one trusted virtual network. The Firebox must have a public external IP address. Firebox Interfacesįor this example, the Firebox at Site A has one external interface and one trusted network.Īzure does not support VPN connections to Fireboxes behind NAT devices. For detailed instructions, see Configure a BOVPN virtual interface connection to a Microsoft Azure virtual network in the WatchGuard Knowledge Base. This example shows the configuration settings for a BOVPN virtual interface and static routing between a Firebox at Site A, and a Microsoft Azure virtual network at Site B. For information about dynamic routing, see BOVPN Virtual Interface for Dynamic Routing to Microsoft Azure. You can configure static or dynamic routing. For VPN connections to Azure, we recommend that you configure a BOVPN virtual interface on the Firebox instead of a BOVPN. For example, you might configure a VPN so that hosts on your local network can securely connect to resources on your Azure virtual network. You can configure a VPN connection between your Firebox and Microsoft Azure. BOVPN Virtual Interface for Static Routing to Microsoft Azure

Azure create site to site vpn