Question

You are configuring a Point-to-Site (P2S) VPN on an existing route-based VPN gateway (VpnGw2) for a company with 300 remote users. Security requires that users authenticate with their Microsoft Entra ID (Azure AD) credentials, including Conditional Access and MFA enforcement. The users connect from Windows 10 and Windows 11 devices. Which tunnel type and client configuration must you select to support Microsoft Entra ID authentication?

Accepted Answer

Use the OpenVPN (SSL) tunnel type with the Azure VPN Client, and configure Microsoft Entra ID as the authentication type

Answer

Use the IKEv2 tunnel type with the native Windows VPN client, and configure Microsoft Entra ID as the authentication type

Answer

Use the SSTP tunnel type with the native Windows VPN client, and configure RADIUS forwarding to Microsoft Entra ID

Answer

Use the IKEv2 tunnel type with the Azure VPN Client, and configure certificate-based authentication mapped to Entra ID groups