Azure VM & Networking Foundation Pack: Secure Hybrid Connectivity Setup

https://catalogartifact.azureedge.net/publicartifacts/gruppozenitsrl.az-02-613802f7-ba31-4b85-962e-db411d390f22/image3_logozenit216x216.png Overview Additional information Azure VM & Networking Foundation Pack sets up the base network infrastructure in Azure, providing a ready environment to host the first application workloads. The service follows Cloud Adoption Framework principles, implementing a Hub & Spoke architecture where the hub centralizes shared services and connectivity, while spoke networks are dedicated to hosting application workloads. This approach favors workload isolation, governance, and scalability. Microsoft Azure licenses, subscriptions, and any required tools are not included and remain the customer's responsibility. What the implementation includes Introductory workshop to share the key concepts of the Azure platform and the infrastructure resources involved. Verification of technical prerequisites and the target Azure environment. Implementation of the Hub & Spoke network topology with one hub VNet and one spoke VNet. Configuration of a Site-to-Site VPN tunnel between Azure and an on-premises location. Implementation of Azure Firewall Standard for centralized traffic control, with rules to reach the test VM. Implementation of Azure Bastion for secure administrative access to VMs. Creation of a test/POC Windows VM to validate connectivity and administrative access. Preparation of final documentation and a training session. Deliverables Hub & Spoke network topology with hub and spoke VNets. Site-to-Site VPN connectivity between Azure and the on-premises location. Azure Firewall Standard configured for centralized traffic control. Azure Bastion configured for secure administrative access. Validated test/POC Windows VM. Final documentation and training session. Customer requirements Active Azure subscription. On-premises location with a device compatible with Site-to-Site VPN configuration. Required administrative access on the Azure subscription. Network connectivity and IP addressing information available for the on-premises location. Licenses, tools, certifications, and software beyond what is listed are not included unless otherwise specified. This service does not include migration of existing workloads, implementation of additional spoke networks beyond the one included, ongoing network operations management, advanced security hardening beyond the listed components, or design and implementation of ExpressRoute connectivity.