Azure Virtual WAN is a network service that facilitates optimized and automated Virtual Private Network (VPN) connectivity from enterprise branch locations to or through Microsoft Azure. Azure subscribers’ provision Virtual Hubs corresponding to Azure regions and connect branches (which may or may not be SD-WAN enabled) through IP security (IPSec) VPN connections.

SD-WAN Orchestrator supports Azure Virtual WAN and SD-WAN Gateway integration and automation by leveraging the Azure backbone to establish branch-to-Azure VPN connectivity through the SD-WAN Gateway as shown in the following diagram.

The following sections describe the procedures for configuring the SD-WAN Orchestrator and Azure to enable branch-to-Azure VPN connectivity through the SD-WAN Gateway: