Azure VPN Types. Recall that a virtual
private network, or a VPN, is a secure,
encrypted connection over an unsecure
communications medium, and by unsecure
communications medium, we're talking about
the public internet. So the VPN is going
to use security protocols to create a
tunnel over the jungle that is the
internet that gives us a fully encrypted
private link from our on‑premises local
network environment into a hub Azure
virtual network. This conveys a lot of
value, which we'll discuss in the next
slide. Some of the value propositions
behind your establishing a hybrid cloud
with an Azure VPN include simply extending
your local environment into Azure, and
when I say extend, I really do mean
extend. You can fully embrace a hybrid
cloud deployment model where you have some
resources and services running locally in
your on campus environment, others running
in Azure. I find in my work as a cloud
solutions architect hybrid cloud with a
VPN is an excellent bridge for a business.
They may decide to stay in that
configuration, or they may have the goal
of eventually being cloud only or cloud
first and decommissioning your on‑premises
environment. But you have to start
somewhere, and VPN is a great entry point
to hybrid cloud. Having a site‑to‑site VPN
between your on‑premises environment and
an Azure virtual network means, for
example, you can manage local systems from
Azure. Actually, you don't even need a VPN
to do that nowadays if you've ever heard
of Azure Arc. If you haven't, check the
exercise files. Compliance requirements;
Microsoft has an entire web application
devoted to all of their compliance
attestations. Again, I keep sounding like
a broken record here, check the exercise
files for more info on that. I find that
some of my clients find it easier to stay
in compliance with their Azure environment
than with their local environment. We can
do the opposite, that is to say, manage
Azure systems from your local network. You
may be invested, for example, in the
system center products, and you might want
to include Azure‑based virtual machines as
part of your local system center
management groups. And lastly, we have
high availability. In fact, Azure VPN does
support active, as well as active passive
failover. This works in conjunction with
BGP, the border gateway protocol, so
there's lots of good, solid value here for
Azure VPN. Next, let's take a look at the two types of Azure VPN in more detail.