Hi All,
I am hoping I can find a better solution to my problem here.
We currently have site to site vpn's between many 3rd party sites to our internal servers, a single FTD on premise.
The customer already has a solution DR to a checkpoint in azure that DR servers sit behind. Private addressing is currently used to the DR solution. This solution is only made 'live' in the even of a failure of the primary site with the on premise FTD.
The DR servers are then be NAT'd at the new DR Checkpoint azure firewall so the customer does not know about any change of server location behind the DR site.
The customer now requires DR to the same Checkpoint but has given it an external IP address as it was using MPLS but will no longer use MPLS.
I feel like there must be a better way to do this with Azure hosted apps or maybe an azure hosted FTD failover unit.....
Any advice appreciated.
Sam
It would seem better to have the on premise FTD
