Preferred solution (continued) www.woodgrovebank.com Internet Chicago 10.0.2.0/23 Cloud Access Point Backend Systems Perimeter services NGFW VPN device Plano 10.0.0.0/23 Traffic Manager Hub Vnet 10.7.0.0/16 Gateway subnet 10.7.255.224/27 Management 10.7.0.0/27 VPN Gateway Availability set 10.7.0.32/27 HA Pair Azure load balancer Peering Application Vnet 10.10.1.0/24 Web tier 10.10.1.0/27 Availability set PaaS Services Azure subscription Azure SQL database Azure Storage Azure SQL Datawarehouse Virtual Network Service Endpoint Business tier Data tier 10.10.1.32/27 10.10.1.64/27 Availability Availability set set Forced Tunneling Internet Banking Inspected Traffic Service Endpoint Traffic

Cloud Web App Deployment Internet Application Gateway Web apps SQL Database Azure Pass Services Azure PaaS Services