Support Network Security Groups to restrict access by IP or enable VPN tunneling
Feedback: Have an optional NSG like feature for IoT Hub. This will enable restricting access to IoT hub from an IP Range or enable VPN tunneling
Large enterprises with manufacturing units, factories etc have very stringent policies on connectivity to Internet. Most of them only allow data transfer for VPN. We had a tough time convincing security team to send data over to IOT Hub. They agreed for the PoC with certificate based authentication. However, for production they will not agree to this approach. It has to be over VPN, or there should be a way to restrict the particular IOT hub from receiving data from specific IP address ranges.