this is a persistent problem with all network appliances in that you cannot control inbound traffic to a VNET as you would expect; this is complicated more if you have ExpressRoute and multiple VNETS connected to the same circuit. you will need to...