How do I block replication traffic passing through Azure NSv?

If you are using an NSv  firewall to control outbound network traffic from VMs, the appliance might get throttled if all the replication traffic passes through the NSv. We recommend creating a network service endpoint in your virtual network for "Storage" so that the replication traffic does not go to the NSv.

Note that:

• Azure's default system route for Azure VM replication is 0.0.0.0/0.
• Typically, NSv deployments also define a default route (0.0.0.0/0) that forces outbound Internet traffic to flow through the NSv. The default route is used when no other specific route configuration can be found.
• The same limitation also applies when using default routes for routing all Azure VM traffic to on-premises deployments.

1. Creating Network Service Endpoint for Storage Under Home | Virtual Networks | [Your Virtual Network].

• Select your Azure virtual network and click on 'Service endpoints'.

2. Click Add and select ‘Microsoft Storage ‘ under ‘Service and Subnets should be selected as Select All and click ‘Add’.

This will re-route the storage traffic away from Sonicwall NSv firewall.