Question

Your company must connect an Azure VNet to an on-premises data center using a Site-to-Site VPN. The on-premises device is a legacy firewall that only supports IKEv1 and requires a single traffic selector pair (a policy-based/static-routing tunnel). You need to deploy an Azure VPN gateway that can terminate this connection while keeping costs minimal. Which gateway configuration meets the requirement?

Accepted Answer

Deploy a Basic SKU VPN gateway configured as a policy-based (static routing) gateway

Answer

Deploy a VpnGw1 SKU VPN gateway configured as a route-based gateway with a custom IPsec/IKE policy

Answer

Deploy a VpnGw2AZ SKU VPN gateway in active-active mode configured as a route-based gateway

Answer

Deploy an ExpressRoute gateway and configure private peering to the on-premises firewall