Default outbound access retirement for VMs and S2S VPN

Question

Hi All,

As we now on 30 September 2025 default outbound access for VMs will be retired.

https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-transition-to-a-new-method-of-internet-access/

I have on-prem to Azure S2S VPN (on Azure side by means of virtual network gateway + local network gateway).

Just wondering if default outbound access retirement may affect the current VPN set up.

As far as I can see and understand it should NOT.

Just want to double-check myself.

Your thoughts on this would be highly appreciated.

Answer 1

Hi @Cloud_Geek_82,

Greetings!

Welcome to the Q&A Platform for Microsoft! We appreciate you posing your query here.

Whatever the document you mentioned is correct, as per the document it won't be effect and make the transition to a new method of internet access.

Recommended action

To ensure more controllable and traceable internet connections,

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access#how-can-i-transition-to-an-explicit-method-of-public-connectivity-and-disable-default-outbound-access

any existing VMs that rely on default outbound access to use an explicit method of connectivity.

---

If the preceding response helps to solve your concern, please remember to "Accept Answer" and "Upvote it" so that others in the community with similar problems can easily find a solution.

Your contribution is greatly appreciated.

Best wishes,

Ganesh