I have multiple VNET’s that connected each other with a Virtual Hub. My VNETs’ private subnets can connect internet via a Azure Firewall and my firewall rules are any to any for any ports temporarily.