So that wraps up this module on deploying Always On VPN in Azure.
We covered a lot of ground in this module,
and you saw that there were a couple of different options
for cloud‑native VPN infrastructure, specifically the Azure VPN Gateway,
or virtual network gateway.
Although that's a pretty decent solution,
you saw that it had some rather important limitations,
specifically around supporting device and
user‑based connections at the same time.
Also some, you know, interesting limitations on scalability,
but still a good solution, and it may work in some scenarios.
We also talked a little bit about Azure Virtual WAN,
which as you saw, has some very powerful capabilities,
and it certainly is incredibly scalable,
but it seems to be even more limited for its support of Always On VPN.
Specifically, and I think this is the showstopper for Azure Virtual WAN,
is that it has no support at all for SSTP,
which is a really,
really good option to use for Always On VPN and the user tunnel.
We talked a little bit about Windows Server,
and as I described there,
it's really the solution of choice if you're deploying
Always On VPN infrastructure in Azure.
The real problem there is that it's just not formally supported,
but if you can accept that,
deploying Windows Server RRAS in Azure can be a pretty viable option,
and I think it's one in which you'll find it meets your requirements quite well,
and it has a great, you know, user experience,
as well as administrative experience also.
And then finally we talked a little bit about using a network virtual appliance,
or NVA.
Those are available from your favorite third‑party vendors.
Unfortunately,
time prohibits us from really diving deep into those options
simply because there's so many of them.
But ultimately, if you have a solution of choice,
a favorite solution you like to use,
more often than not there's going to be a marketplace appliance
available that you can leverage for Always On VPN. Join me in the next module where we'll deploy certificates using Intune.