Is this a valid design without migrating the firewall into it's own hub VNET? I see routes exchanging but not able to communicate between ExpressRoute and the Azure VM environment with this design in the environment.   submitted by   /u/nicholaspham   to   r/AZURE [link]   [comments]