In this topology, SOPHO XG firewall will manage all traffics within azure virtual network. Azure Virtual Network: VNET: 172.16.0.0/16. Within this Virtual Network, there are four subnets. LAN Subnet: 172.16.0.0/24 WAN Subnet: 172.16.1.0/24 Management-Subnet: 172.16.2.0/24 DB-Subnet: 172.16.3.0/24 SOPHO XG Firewall will take care of the inbound and outbound traffic to azure virtual network. Best Regards, Phone Myint Myat Zaw