Need to whitelist incoming traffic from Azure VPN Client through Service Tag

Anonymous
2025-08-18T09:56:33.83+00:00

As part of one of the my task, I need to whitelist incoming traffic from Azure VPN Client through Service Tag. So which service tag I can use for this? Initially I have whitelisted through passing all the IP ranges which are relates to that specific VPN but I want to do it with Service Tag only so can someone please suggest the Tag?

Azure Traffic Manager
Azure Traffic Manager

An Azure service that is used to route incoming network traffic for high performance and availability.

0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Ganesh Patapati 12,170 Reputation points Microsoft External Staff Moderator
    2025-08-18T11:11:58.8366667+00:00

    Hello Dhwani Anjirwala

    Unfortunately, there is no specific Azure Service Tag dedicated solely to the Azure VPN Client or Azure VPN Gateway for whitelisting incoming traffic. Service Tags in Azure are designed to represent groups of IP address prefixes for specific Azure services, but the Azure VPN Client and Azure VPN Gateway do not have a dedicated Service Tag.

    You can whitelist incoming traffic by using either network security groups, Azure Firewall, or user-defined routes.

    I hope this has been helpful!

    If the above is unclear or you are unsure about something, please add a comment below.

    Was this answer helpful?

    0 comments
  2. VIVEK DWIVEDI 270 Reputation points Microsoft Employee
    2025-11-05T12:11:27.08+00:00

    Hi @**Dhwani Anjirwala,

    May I know where you want to allow this traffic? if the requirement is on NSG you can use Virtual network as a service tag (Though there is no specific service tag for VPN client addresses.)

    Virtual Network Service Tag -**

    The virtual network address space (all IP address ranges defined for the virtual network), all connected on-premises address spaces, peered virtual networks, virtual networks connected to a virtual network gateway, the virtual IP address of the host, and address prefixes used on user-defined routes. This tag might also contain default routes.

    Since it covers multiple IP address as described above, please be careful while allowing/deny traffic for this service tag.,

    I hope this helps, if yes please upvote to help the community.****

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.