Yes that is correct, we use the following where 104.x.x.x is the public IP of the gateway and 10.0.0.0/16 is our Azure private networks: route VPN-AZURE 10.0.0.0 255.255.0.0 104.x.x.x 1

Yes, we have just updated our ASAs tonight to 9.8.1 and successfully connected using IKEv2 and VTI to Azure: crypto ikev2 policy 3 encryption aes-256 integrity sha group 2 prf sha lifetime seconds 10800 crypto ipsec ikev2 ipsec-proposal PROP-AZURE  p...