The next option available to administrators wanting to deploy Always On
VPN infrastructure in Azure is Azure Virtual WAN. Azure Virtual WAN is an
advanced networking capability that's a part of Azure, and it is an
extremely powerful networking platform.
There's a lot of capabilities built into Azure Virtual WAN,
and it is it is a quite compelling solution,
no doubt. The advantages, of course, to using Azure Virtual WAN,
especially considering its use over Azure Virtual Gateway, is
that it has much more scalability and throughput. As you'll
notice later in the demonstration, you'll see that it supports many,
many more concurrent users for point‑to‑site VPN.
The disadvantages, of course, are much like the VPN Gateway in Azure
that it has limited support for Always On VPN and, in fact, even more
limited support than the Azure Virtual Gateway.
In terms of the Azure Virtual WAN, it supports IKEv2 only,
so there's no support for SSTP whatsoever in Azure Virtual WAN. In addition,
much like the Azure Virtual Gateway, it does support single tunnel only,
so you can only deploy a device‑based connection or a user‑based connection.
You cannot deploy both.
In that case, it has the same restrictions as Azure VPN Gateway.
Again, no support for force tunneling,
no support for geographic redundancy. When you implement the Azure Virtual WAN,
you must use the standard SKU, so be aware of that if you decide to go this route.