I have multiple virtual networks, a VPN VN with site-to-site VPN, an AADDS VN, a production website cluster of virtual machines on a VN and a test website cluster of virtual machines on a VN. I also have a series of app services.
I have been advised to add a virtual machine firewall and it's got me a little stumped.
I have a public IP on the web server on each cluster, and the VPN.
The virtual machine based firewall (WatchGuard FireBox) only allows a single NIC on the untrusted side.
I could use an application gateway to route traffic to each website (production, test and app services) from a single IP, and a jumpbox to RDP to each VM (6 in total across test/prod), this would allow me to use ports of this single NIC to route traffic to its destination. This isn't ideal.
How can I intercept all external traffic using the firewall and still access multiple IPs using azure? Is a jumpbox and application gateway the only way?
Little confused to be honest. All input appreciated.