You have an SAP production landscape on-premises and an SAP development landscape on Azure.

You deploy a network virtual appliance to act as a firewall between the Azure subnet and the on-premises network.

Solution: You configure route filters for Microsoft peering.

Does this meet the goal?