Azure Site 2 Site VPN Gateway with SophosXG - Exam AZ-104: Microsoft Azure Administrator

[@nabeelthetrader]

Hi sir, Can I please ask, at 06:34, you showed the high availability VPn solution with two VPN tunnel from on premises firewall, What if 1 tunnel is with 1gb line and 2nd tunnel is with 100Mb line Is there a way to prefer the faster tunnel until it fails, and then failover to a slower link

[@mwcloud]

learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable you need to read these docs about Multiple on-premises VPN devices, then you would need to adjust your local routing to do this setup so traffic flows over the first gateway as preference with failover to the other gateway.

[@michaelfishman6082]

Your videos are great!

[@treygraham52]

Nice vid easy to follow and understand

[@Robert-yk8tx]

Thank you for sharing. So in the onprem firewall's ipsec settings, you have to give the Virtual Network ip-range and not the Gateway Subnet? 🤔

[@mwcloud]

The VPN endpoints are also routing traffic as routers so they need to know the ranges on the other side of the tunnel

[@dosumuoluwadamilare4052]

Need help with installing the SophosXG firewall. The instance detail is requesting for Workspace. I have no idea what that is, but I created a workspace in the region I wanted the firewall, but it's not in the dropdown list.

[@mwcloud]

you have selected "Sophos XG firewall solution" in the search, which confusingly is the component needed to connect it to sentinal, and sentinal needs to use log analytics workspaces. The solution is to go back to the search bar in Azure and type simply "sophos firewall" this will deploy what it is you want. It is a confusing name is all

[@e2matt]

Have you ever had to configure a SNAT to hide an on-prem network behind 1 IP through the IPSEC tunnel?

[@mwcloud]

i cannot say that I have

[@marketbytesofficial1028]

I did the same setup. I am able to communicate form azure to On Prem but not able to communicate drom On prem to azure. Please guide me

[@mwcloud]

Probably a routing issue if you can go one way but not the other

[@marksimmons5839]

Love your videos Mike. I was under the impression (From Scott Duffy) that VPN Gateway questions were removed from the AZ 104 ...am I wrong.?

[@mwcloud]

You know, I am not too sure, Microsoft add and remove question all the time from the exams and they don't exactly publish a list of the questions they have added and removed. The official study guide list here learn.microsoft.com/en-us/certifications/resources/study-guides/az-104?preview=pdf-vnext#skills-measured-as-of-october-27-2022 still lists "Monitor virtual networking - Monitor on-premises connectivity" So even if they have removed any specific VPN/Gateway/Express Route questions the concept may come up as part of questions in another topic so it is a good idea to have an understanding of what is involved with on-site connectivity

[@marksimmons5839]

@@mwcloud kzbin.info/www/bejne/pX-QlZ-qiNRjf6M ~3:37 Scott mentions it...I just thought I'd ask you about it since some of your video titles sort of imply otherwise. Love your teaching style,I'm just trying to pinpoint areas of focus since I'm scheduled to take the exam one week from today.

[@mwcloud]

I just watched that video, sometime when MS make exam changes they release a study guide PDF with those changes marked, they remove this from their site after a few weeks though. When it come to the exam back when I took it (when it very first came out) there couldn't have been more than a couple of questions on VPN's anyway. I would not stress about it too much. At the end of the day, there is a pool of questions and MS will throw a randomish selection of them at you. You will either know the answer or you wont. Spending hours trying to understand a small section of the AZ-104 exam topics that you may only see one or 2 questions on is a bad use of your time. Have you had a look at my "how to pass your exam" video yet? The TL;DR really is, dont overthink it, dont over stress, if you dont pass first time it doesnt matter, you can take it again and you will get it the next time because now you know what was in it and what you were missing!

[@mwcloud]

When I make these videos in realation to the exams I try to keep them short and to the point and over the things that I think are most likey going to be presented to you in the exams based on my past experiences of studying and taking way more MS exams over the past 15 years than any sain person ever would do in the normal career track. Good Luck!

[@marksimmons5839]

@@mwcloud I just so happened to have watched it yesterday, and I like your suggestions. You're right, even if I don't pass this time I know I'm not far off and i will eventually pass...no point in worrying....

[@adityaiyer4906]

Nice video. How do you get your video cropped in nicely with the background?

[@mwcloud]

Its all Camtasia

[@Matt-mv7np]

Great video! I’m searching for a solution like this one but with two on premise ISP’s for redundancy.

[@mwcloud]

Glad it was helpful!

[@Rockatansky-ei4je]

Why the awful background music? Everything is unwatchable because of it.

[@mwcloud]

I’m sorry, I was new to making videos, I have got better with the music and removed it a lot in future videos