We're starting to explore implementing Azure Files to replace our traditional file server, but right now our Azure usage is minimal. I understand we'll need either a Site-to-Site VPN or ExpressRoute for connectivity. My main concern is whether adding Azure Firewall is necessary for this setup, or if it's common to go with just the Site-to-Site connection along with Network Security Groups. How do others typically approach this? I'm hesitant about the added cost of the basic Azure Firewall at $275 a month.
1 Answer
You generally don't need Azure Firewall unless you want to monitor and inspect traffic specifically. For your storage account, consider disabling the public endpoint, enabling a private endpoint with a private DNS zone, and setting up a conditional forwarder on-premises. This way, your traffic can go through the Site-to-Site VPN or ExpressRoute directly to the Azure storage. Additionally, if you require low latency access to files, Azure File Sync might be beneficial. It allows you to maintain a local file server that syncs with Azure Files, giving you quick access to frequently used files as a cache.
Exactly! Just remember to test everything before migrating, especially if your team uses apps like AutoCAD that handle large files. Latency can be a real issue with S2S or ExpressRoute.