Azure AVS private cloud

Question

1. If create AVS private cloud for on premise recovery do I get multiple recovery choice?
2. Do I need both azure landing zone and AVS private cloud?
3. If I need Azure landing zone with express route direct, then would it suffice to filter traffic from Azure Landing vWAN before it enter the AVS or do I have to deploy additional firewall in AVS?
4. If I deploy additional firewall in AVS then can I deploy Azure firewall or AVS only support third party NVA?

Answer 1

Hi prasantc,

Welcome to the Microsoft Q&A Platform. Thank you for posting your query here.

Yes, if you create an Azure VMware Solution (AVS) private cloud for on-premises recovery, you get multiple recovery options. The available choices depend on the disaster recovery (DR) solution you implement.

https://learn.microsoft.com/en-us/azure/azure-vmware/ecosystem-disaster-recovery-vms

https://learn.microsoft.com/en-us/azure/site-recovery/avs-tutorial-prepare-azure?context=%2Fazure%2Fazure-vmware%2Fcontext%2Fcontext

If you are integrating other Azure services (e.g., Azure Virtual Machines, Azure SQL, or Kubernetes), then setting up an Azure Landing Zone is recommended to ensure governance, networking, and security are properly configured.

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/azure-vmware/virtual-network-connectivity?source=recommendations

This blog series, discusses native security options, 3rd party firewall integration with AVS along with a deep dive into configuration details. First in the series, this blog would summarize the security options available at your disposal.

Firewall integration in Azure VMware Solution: https://techcommunity.microsoft.com/blog/azuremigrationblog/firewall-integration-in-azure-vmware-solution/2254961?utm_source=chatgpt.com

Azure VMware Solution customers have multiple security options available to protect their workloads. Some of these firewalling capabilities can be used out of the box to provide East-West and North-South firewalling. Along with the built-in security capabilities, customers can also leverage the 3rd party firewalls or next-gen firewalls to provide additional security and maintain the same security posture as they have on-premises.

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/azure-vmware/example-architectures#scenario-3-outbound-traffic-from-azure-vmware-solution-with-or-without-nsx-t-or-nvas

Hope this helps!

If the comment is helpful, please click "upvote" to let us know.

Answer 2

Sorry, I can't help with this. Please try again or share your feedback.