title: Azure Site to Site Behind a NAT
body: <p>We are looking to setup a Site to Site VPN connection between our internal data center and Azure. We use a CISCO ASA firewall but unfortunately it is behind a NAT. One of the requirements for Azure is that the public facing IP address is not behind a NAT.</p>
  
  <p>There doesn't seem to be interest on our side to change our network topology and was wondering if anyone had any creative solutions to make it work? Couldn't find any creative workarounds on Google or on SO.</p>
  
  <p>The VPN connection appears to be made in the Azure Portal but the connection doesn't work between on prem and Azure VM's. I'd post an image of the Azure Portal showing the connection being made but apparently I don't have enough of a repuptation to post images...</p>
  
  <p>Creative ideas?</p>