Azure VPN Client Security

Florian Lacroix 1 Reputation point
2022-04-29T13:00:47.313+00:00

Hi everyone !

I've a question about Azure VPN Client.

I would like to know what is the security about the client by himself.

I saw that seems any users can edit config files of the VPN and import it as they want...

I would like to know if it's possible to block that and just allow administrator of the compagny to manage this part and don't allow any basic user to change settings of the Azure VPN Client.

Cordially,
Florian Lacroix

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,375 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. GitaraniSharma-MSFT 47,011 Reputation points Microsoft Employee
    2022-05-02T12:20:04.86+00:00

    Hello @Florian Lacroix ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you would like to know if it's possible to block users to change the settings of the Azure VPN Client and just allow administrator of the company to manage this part.

    Could you validate if you are referring to the VPN client that can be downloaded from the Azure portal?

    If your users have access to Azure portal and the VPN gateway, you could restrict the permissions with RBAC custom roles and assign "NotActions" properties for P2S VPN resource level roles to all the users such as the below:

    Microsoft.Network/p2sVpnGateways/read - Gets a P2SVpnGateway.
    Microsoft.Network/p2sVpnGateways/write - Puts a P2SVpnGateway.
    Microsoft.Network/p2sVpnGateways/generatevpnprofile/action - Generate Vpn Profile for P2SVpnGateway.

    Refer : https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#networking
    https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments