Share via

Is it possible to isolate traffic between clients connecting to an Azure VPN Gateway?

Johan de Jong 0 Reputation points
2025-01-20T16:18:23.64+00:00

I have an Azure VPN Gateway (SKU: VpnGw1, route-based) configured using client certificates. That works well, clients can connect to the gateway, but also to each other, e.g., I can ssh to another client also connected to the VPN gateway.

That should not be possible according to the Azure VPN Gateway FAQ:
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq

"Can two VPN clients connected in point-to-site to the same VPN gateway communicate?
No. VPN clients connected in point-to-site to the same VPN gateway can't communicate with each other."

But apparently they can. Is there a setting so I can prevent this? I've tried using a Network Security Group, but in the end didn't manage to isolate traffic.

Please enlighten me about possibilities on how to achieve this (without creating a separate VPN Gateway for each client).

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,622 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ganesh Patapati 3,135 Reputation points Microsoft Vendor
    2025-01-20T18:30:41.6966667+00:00

    Hi Johan de Jong

    Greetings!

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    In a point-to-site (P2S) VPN configuration, clients should not be able to directly communicate with one another.

    Network Security Groups: While NSGs can control traffic to and from Azure resources, they do not apply to P2S VPN clients directly. NSGs are typically used for controlling traffic to Azure resources like VMs, not for controlling traffic between VPN clients.

    NOTE: Yes, you are correct as per the documentation, VPN clients connected in point-to-site to the same VPN gateway can't communicate with each other.

    User's image

    I hope this has been helpful! Your feedback is important so please take a moment to accept answers. If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

    Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

    Regards,

    Ganesh

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.