So basically, right now we have a fully public facing Web server inside the local network and is a member of the domain. We're going to be migrating this to azure. I have recommended that the server be in it's own azure VNET, not connected to the domain.
My intentions here we're that no link would exists between us and the Azure IIS Server, other than our ability to upload files to the Azure File storage and RDP into the server.
However, I am having issues with uploading files to the Azure File storage (as our ISP blocks port 445 outgoing.)
Everyone around here keeps talking about a VPN to our azure VNet would resolve the issue. To me this basically means that our Azure VNet would then be a member of the network and we're in the same boat we are now. Is my assumption correct?