A team plans to give field engineers remote access through a point-to-site VPN. Their existing gateway was built as a policy-based device. What must change to support remote access?
Show answer and explanation
Answer: D
Point-to-site connections require a route-based VPN gateway. Policy-based gateways do not support this model, so the team must deploy a route-based gateway, typically a VpnGw SKU, and configure point-to-site on it. Application Gateway, ExpressRoute and NIC settings do not provide point-to-site client access.
Why the other options are wrong
- A. Application Gateway is a Layer 7 load balancer for web traffic. It cannot terminate point-to-site VPN clients or replace a VPN gateway.
- B. An ExpressRoute gateway serves private circuits to on-premises networks. It does not enable point-to-site client tunnels, so adding it does not fix the problem.
- C. Accelerated Networking changes NIC performance for VMs. It has no effect on the gateway's supported VPN connection types.