NAT
VM initiates outbound connection
RDP access
Service Endpoints
VNETS not required for: - SQL Database - Cosmos DB - Azure Storage - SQL Data Warehouse Extends VNETS to services that don't support VNETS
Route Tables
System Defined (cannot be edited or changed) User-defined routes
NSG Service Tags
Simplify NSG rules Do not have to supply IP ranges Examples - Internet - virtualnetwork
Forced Tunneling
Force all outbound-internet traffic to go through on-premise network (for auditing)
Adds extra load so not recommended for external web servers