I can build this connection. What type on premise device does the client have that needs to be linked up to azure? Do they need a site to site VPN or point to site? I've built nearly 10 connections from on premise to azure and virtual firewalls. Please let me know if you have any questions, thank you.