Connection Units and Scale Units Demo
Start course

Organizations use site-to-site VPNs and ExpressRoute to connect on-premises networks to Azure. As an organization grows, so does the complexity of implementing and managing connectivity between the cloud and on-premises locations.

In this course, we review Azure Virtual Wide Area Network (WAN). Azure Virtual WAN creates a hub-and-spoke topology that provides a single interface for managing branch connectivity, user access, and connectivity between VNets. We also cover how Azure Virtual WAN hubs connect with other network resources to create a full mesh topology that serves as a backbone of a hybrid network.

Learning Objectives

  • Design an Azure Virtual WAN architecture
  • Understand the SKUs and related features of a Virtual WAN
  • Create a Virtual WAN hub
  • Create a network virtual appliance (NVA) in a virtual hub
  • Configure virtual hub routing
  • Understand connection units and scale units

Intended Audience

  • System or network administrators with responsibilities for connecting an on-premises network to Azure
  • Anyone preparing for the Azure AZ-700: Designing and Implementing Microsoft Azure Networking Solutions exam


  • A basic understanding of networking, routing, and VPN concepts
  • An Azure subscription (sign up for a free trial at if you don’t have a subscription)

Welcome back. In this demo, we review how to view and modify scale units on a NVA and a site-to-site VPN connection. Scale units refer to the capacity available on a gateway or NVA. We would want to increase capacity if we hit a threshold or likewise decrease the scale unit if the gateway was under-utilized. Let's first go into the NVA. This is the Barracuda gateway set up previously. Let's go into the managed application. From the home screen of the NVA, we can adjust the scale units available for the device. Select the new setting and then review and create to finish.

Next, let's go to the virtual hub with a site-to-site connection. The WEuropeHub shows one VPN site. Let's go to that hub. Next, go to VPN site-to-site. At the top of the screen, we can select the scale unit. Open that to view and update the scale unit. It's worth noting that there are two gateways in this configuration for high availability. The throughput is for each interface, so one scale unit is 500 megabits per second for a total of one gigabit per second. Update, then edit to modify the settings. Be aware that it can take up to 30 minutes or longer for the change to take effect. That's how to view and modify scale units on an NVA and a VPN gateway.

About the Author

Travis Roberts is a Cloud Infrastructure Architect at a Minneapolis consulting firm, a Microsoft MVP, MCT, and author. Travis has 20 years of IT experience in the legal, pharmaceutical, and marketing industries and has worked with IT hardware manufacturers and managed service providers. In addition, Travis has held numerous technical certifications throughout his career from Microsoft, VMware, Citrix, and Cisco.