Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
2 answers
Standard D8ns v6 VMs cannot reach Azure Files Private Endpoint over TCP 445 when NAT Gateway is enabled
Hello, I need help with an Azure networking issue involving Azure Virtual Desktop, NAT Gateway, Azure Files Private Endpoint, and TCP 445 / SMB connectivity. This is not a general outbound internet connectivity issue. NAT outbound internet access works…
Azure NAT Gateway
asked
2026-06-24T16:16:08.51+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 49%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
mr. Ma
0
Reputation points
commented
2026-08-28T16:01:25.42+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 23%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDC%3C/text%3E%3C/svg%3E)
Dan Campbell
0
Reputation points
1 answer
Azure vTAP captures only one direction of traffic when NAT Gateway is used
We are running a POC using Azure Virtual Network TAP to mirror traffic from a VM NIC to an NDR sensor. Observed behaviour: When the VM uses a directly assigned Public IP, the sensor receives bidirectional TCP traffic. When the same VM uses an Azure…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 74%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
3 answers
VTAP not working when NAT Gateway is enabled
We are doing a POC with various NDR solutions on Azure, by using VTAP to forward a copy of network packets to the NDR sensors from a VM NIC. Everything works fine until the NAT Gateway is enabled. We stopped seeing the expected traffic coming into the…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 20%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Upgrading AKS cluster to use NAT Gateway Outbound Type Failure
Hello, I am trying to upgrade my AKS cluster to use NAT Gateway as the outbound type, however, I am encountering an error related to this: (CreateOrUpdateLoadBalancerError) Create or update load balancer failed: Subscription: *; resource group: *;…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-07-08T19:21:19.02+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 23%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDW%3C/text%3E%3C/svg%3E)
Danny Wall
20
Reputation points
accepted
2026-07-09T13:36:06.8066667+00:00
Danny Wall
20
Reputation points
2 answers
One of the answers was accepted by the question author.
NAT Gateway TCP idle timeout causes silent connection resets
We are running workloads on AKS that make outbound HTTPS connections to external endpoints. Following Microsoft's recommendation to migrate away from the deprecated default outbound access via Load Balancer, we configured a NAT Gateway for outbound…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 89%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
3 answers
How to see traffic to an Azure NAT Gateway
I recently deployed an Azure NAT Gateway with NVA (Palo Firewall). Since that outbund traffic does not go through the NVA for Internet access now, how to do I see the outbound traffic?
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-04-08T14:08:08.1133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 35%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDT%3C/text%3E%3C/svg%3E)
Dwight Thompson
30
Reputation points
answered
2026-04-17T14:54:58.38+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati
12,170
Reputation points Microsoft External Staff
Moderator
1 answer
Concerns and support receiving dual-vendor firewall strategy
I am escalating a request for formal clarification regarding the supportability of a third-party firewall (NVA) architecture within Microsoft Azure. As my work place, we are mandated to maintain a dual-vendor firewall strategy, and therefore cannot adopt…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-03-26T09:11:08.8733333+00:00
Shan Vasudevan
20
Reputation points
commented
2026-03-27T08:49:18.99+00:00
Shan Vasudevan
20
Reputation points
1 answer
One of the answers was accepted by the question author.
Unable to use the allocated IP service Tags for outbound IP deployments
I get the below error when i try to provision outbound Ip's using the new ServiceTag's that were allocated for my Service. "code": "VipAllocationFailedWithVipRangeNotFound", "message": "No matching VIP…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-03-08T03:55:16.58+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 15%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKB%3C/text%3E%3C/svg%3E)
Kishore Bhojan
20
Reputation points Microsoft Employee
accepted
2026-03-16T17:55:04.7666667+00:00
Kishore Bhojan
20
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Technical Investigation Request – NAT Gateway 1TB Data Processing Usage Spike
We have observed that our NAT Gateway has processed approximately 1 TB of data in the current billing month, resulting in a significant increase in cost. The Azure billing team has reviewed the charges and confirmed that the consumption is valid from a…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-02-27T10:51:37.1566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
accepted
2026-03-02T10:52:15.8533333+00:00
Anonymous
1 answer
We are observing Azure Advisor alerts indicating that several virtual machines are currently using default outbound public IP connectivity. Microsoft is recommending a move away from this default behavior to improve security, compliance, and network contr
Check documentation for any gotcha or procedures that we are missing according to our infrastructure. Some servers have public IP addresses, verify how this is affected if it goes through a NAT gateway. Verify if this gateway also needs a security…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-02-20T10:11:26.1933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 3%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKC%3C/text%3E%3C/svg%3E)
KARYA Cloud Support
0
Reputation points
answered
2026-02-20T10:57:41.4933333+00:00
Ganesh Patapati
12,170
Reputation points Microsoft External Staff
Moderator
2 answers
One of the answers was accepted by the question author.
Wrong IP Geolocation data. 45.126.80.0/22
Hello MOC Team, we are from CBN-INTERNET AS135478 We found that geolocation provider on the internet listed 45.126.80.0/22 as London IP. They spoke that they use Microsoft database https://www.microsoft.com/en-sa/download/details.aspx?id=53601 …
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2026-02-16T07:22:20.7966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 11%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EH%3C/text%3E%3C/svg%3E)
haryanto
20
Reputation points
edited an answer
2026-02-17T12:48:37.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 15%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPB%3C/text%3E%3C/svg%3E)
Praveen Bandaru
11,800
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
Can I Redirect traffic from spoke network directly to NAT Gateway without having an NVA?
Hi, Is it possible to have a hub and spoke architecture where all the spoke traffic is sent to Hub via route table in which NAT Gateway can receive the traffic from spoke directly without having an Azure Firewall or NVA? I believe it's not possible…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 95%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGD%3C/text%3E%3C/svg%3E)
2 answers
Cannot disassociate subnets from NAT gateway
I am trying to delete my NAT gateway, but first I need to disassociate it from its subnets. Whenever I try to do it, I get the error message below. As far as I can tell, I have a Contributor role assigned on Subscription, Resource Group, Databricks &…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-12-16T11:07:51.57+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 10%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPL%3C/text%3E%3C/svg%3E)
Pawel Lewandowski
0
Reputation points Microsoft Employee
edited a comment
2026-01-12T17:31:40.4566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 70%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
akieres
0
Reputation points
1 answer
One of the answers was accepted by the question author.
Create a NAT gateway with ipTags": "[{"ipTagType":"FirstPartyUsage","tag":"AzureMonitorNonProd"}]"
I tried creating a NAT gateway and the associated Public IP address with :"ipTags": "[{"ipTagType":"FirstPartyUsage","tag":"AzureMonitorNonProd"}]" and it returned no resource avaliable in the…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-11-23T07:03:45.96+00:00
Anonymous
accepted
2025-11-25T12:09:10.3933333+00:00
Anonymous
2 answers
Connecting two Different Azure regions
I want to connect two different Azure regions by using Microsoft backbone. I dont want to use Global Vnet Peering and I want to use NAT due to address Overlap What are the available connectivity options.
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-10-07T12:24:45.5566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 28.999999999999996%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Anil Kumar Jakka
0
Reputation points
answered
2025-11-05T11:37:15.1866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 5%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVD%3C/text%3E%3C/svg%3E)
VIVEK DWIVEDI
270
Reputation points Microsoft Employee
2 answers
Upgrade to Standard SKU public IP addresses in Azure by 30 September 2025—Basic SKU will be retired
Need help in Upgrade to Standard SKU public IP addresses in Azure by 30 September 2025—Basic SKU will be retired and getting issue while upgrading it to standard
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-09-18T10:32:29.1+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 52%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Tikam Sharma
0
Reputation points
commented
2025-09-22T09:59:37.5366667+00:00
Anonymous
1 answer
One of the answers was accepted by the question author.
Point-To-Site VPN client Connection Manager needs elevated privilege - Policy Match error 13868
I have created a Virtual WAN then a hub point-to-site with server configuration using certificate. I downloaded the "Virtual Hub User VPN profile" to my laptop where client certificate is setup, ran VpnClientSetupAmd64.exe then go to VPN…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-09-16T11:47:36.69+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 19%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESE%3C/text%3E%3C/svg%3E)
Salam ELIAS
302
Reputation points
accepted
2025-09-18T10:29:01.5066667+00:00
Salam ELIAS
302
Reputation points
2 answers
One of the answers was accepted by the question author.
Outbound IP changed after attaching NAT Gateway to cluster subnets
Hello, I noticed that after attaching a NAT Gateway to the subnets of my AKS cluster, the outbound IP of the cluster changed. Before this change, I already had a Load Balancer with an outbound IP configured, and the cluster’s outboundType is set to…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-08-20T07:45:43.5933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 28.999999999999996%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
MOUTAMA Marina
20
Reputation points
accepted
2025-08-28T14:32:47.5+00:00
MOUTAMA Marina
20
Reputation points
2 answers
One of the answers was accepted by the question author.
How to fix Nat Getway
Hey guys. My NAT getaway had been consuming my Azure resource. Is there any best option besides that? I haven't use Azure for 1 or 2 weeks, but when I connected back, my Nat getaway had a high fee, Why ?
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-08-22T05:52:16.05+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 0%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
Kwadjossan KPAKPAVI
20
Reputation points
answered
2025-08-22T07:38:19.3433333+00:00
Anonymous
1 answer
NAT gateway scope property
Hello, We are noticing that the graph API is returning an extra property on one of our NAT gateway resources that is not there when we query it using the resource manager APIs. Specifically, this command: az graph query -q "Resources | where type ==…
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
83 questions
asked
2025-08-20T18:54:04.1766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 20%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
Justin Pinnix
0
Reputation points
answered
2025-08-20T21:18:40.3533333+00:00
Anonymous