Aviatrix Integration with Microsoft’s SSE Solution

The Aviatrix Gateways run a BGP session over the internet to Microsoft’s SSE Solution gateway to dynamically exchange routes and establish IPsec tunnels for forwarding the network traffic.

The following Aviatrix Gateways support connectivity to Microsoft’s SSE Solution.

A centralized SSE hub is a hub-and-spoke architecture where remote sites and cloud workloads (spokes) are connected to Microsoft’s SSE Solution via the Aviatrix Transit Gateway (hub). The Transit Gateway forwards network traffic destined for the cloud to Microsoft’s SSE Solution for security inspections. Transit Gateways can be deployed across multiple clouds and cloud regions where Microsoft’s SSE Solution access is required.

A key advantage to a centralized hub architecture is that it allows you to connect new remote sites or cloud workloads and leverage the same connectivity from the Transit Gateway to Microsoft’s SSE Solution for traffic forwarding without the need to configure additional IPsec tunnels.

Transit Gateway supports redundant active-active peering connections to Microsoft’s SSE Solution for high-availability. All network traffic is forwarded across both the primary and secondary HA active peering to Microsoft’s SSE Solution.

Transit Gateway provides high performance encrypted connectivity to Microsoft’s SSE Solution across remote sites and clouds for high-bandwidth and higher aggregated throughput for large sites.

A distributed SSE architecture is where network traffic from the cloud and remote sites are forwarded to Microsoft’s SSE Solution via the Aviatrix Spoke Gateway. Each Spoke Gateway establishes connectivity with Microsoft’s SSE Solution.Spoke Gateways can be deployed across multiple clouds and cloud regions where Microsoft’s SSE Solution access is required.

In a distributed SSE architecture, to connect new remote sites or cloud workloads to Microsoft’s SSE Solution, you need to configure new IPsec tunnels for traffic forwarding.

Before you set up Aviatrix connectivity to Microsoft Entra SSE remote network, ensure the following prerequisites are met:

The following are the high-level steps for building BGP over IPsec tunnel connection between an Aviatrix Gateway and Microsoft’s SSE Solution. When building an IPsec tunnel, you configure both sides of the tunnel.