Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
239 questions
Question on Azure Virtual WAN w/ P2S Configuration
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 44%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Kalel
60
Reputation points
I'm in the process of looking at and building out an Azure Virtual WAN. Before doing this, I have previously tested creating an Azure Virtual Network Gateway and successfully connected via a standard Site-to-Site VPN tunnel as well as Point-to-Site configuration. After testing the Point-to-Site, I was able to confirm that my internet traffic uses my normal internet connection while traffic destined for my Azure Vnet, went through the P2S VPN Client (Split-tunnelling).
My question is regarding configuring the P2S VPN Client within the Azure Virtual WAN. Am I correct that with this setup, using the P2S there will be no split-tunnelling and all my traffic (internet bound and vnet) will go through the vWAN?
Thx in advance for any help provided.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati 3,135 Reputation points Microsoft Vendor2025-01-24T21:44:48.2933333+00:00 Hi Kalel
Greetings!
Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
Yes, you are correct in your understanding of how Point-to-Site (P2S) VPN connections work within Azure Virtual WAN.
NOTE: When you configure a P2S VPN client in Azure Virtual WAN, the default behavior is that all traffic from the client will be routed through the Azure Virtual WAN. This means that both internet-bound traffic and traffic destined for your Azure Virtual Network will go through the Azure Virtual WAN.
In Azure Virtual WAN, the P2S VPN is intended to offer a more centralized and managed connectivity approach. Consequently, it does not support split-tunneling in the same manner. All traffic will be routed through the Azure Virtual WAN, enhancing security and management.
Refer: https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-point-to-site-portal
Refer: https://learn.microsoft.com/en-us/azure/virtual-wan/how-to-forced-tunnel
I hope this has been helpful!
Your feedback is important so please take a moment to accept answers. If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Regards
Ganesh
-
Kalel 60 Reputation points
2025-01-26T12:33:21.4266667+00:00 Hi Ganesh,
Thx for the valuable feedback. One other quick question. For Site-to-Site VPN tunnels from On-Prem to the tunnel into the Azure vWAN, I assume normal internet traffic from On-Prem will go out it's normal internet pipe line (not through Azure vWAN) and that any traffic that is destined for the VNETS will only go across the S2S tunnel into the vWAN? Or will all traffic On-Prem also go through the Azure vWAN to access the internet?
Regards,
Mark
Sign in to comment
Sign in to answer