Need to whitelist incoming traffic from Azure VPN Client through Service Tag

Question

Need to whitelist incoming traffic from Azure VPN Client through Service Tag

Anonymous

As part of one of the my task, I need to whitelist incoming traffic from Azure VPN Client through Service Tag. So which service tag I can use for this? Initially I have whitelisted through passing all the IP ranges which are relates to that specific VPN but I want to do it with Service Tag only so can someone please suggest the Tag?

0 comments

2 answers

Your answer

Answer 1

Hi @**Dhwani Anjirwala,

May I know where you want to allow this traffic? if the requirement is on NSG you can use Virtual network as a service tag (Though there is no specific service tag for VPN client addresses.)

Virtual Network Service Tag -**


The virtual network address space (all IP address ranges defined for the virtual network), all connected on-premises address spaces, peered virtual networks, virtual networks connected to a virtual network gateway, the virtual IP address of the host, and address prefixes used on user-defined routes. This tag might also contain default routes.

Since it covers multiple IP address as described above, please be careful while allowing/deny traffic for this service tag.,

I hope this helps, if yes please upvote to help the community.****

Answer 2

Ganesh Patapati 12,170 Microsoft External Staff Moderator

Hello Dhwani Anjirwala

Unfortunately, there is no specific Azure Service Tag dedicated solely to the Azure VPN Client or Azure VPN Gateway for whitelisting incoming traffic. Service Tags in Azure are designed to represent groups of IP address prefixes for specific Azure services, but the Azure VPN Client and Azure VPN Gateway do not have a dedicated Service Tag.

You can whitelist incoming traffic by using either network security groups, Azure Firewall, or user-defined routes.

I hope this has been helpful!

If the above is unclear or you are unsure about something, please add a comment below.

0 comments