Virtual appliances can be used to protect or to gain visibility for the customer's environment, specifically to IaaS. This has nothing to do with service provider's baseline environment.
Let's take a look at security layers offered to customers by Microsoft Azure. When it comes to inbound traffic from the internet, Azure DDoS is the first layer of security and helps us to protect against large-scale attacks against Azure customer resources. The next layer is customer-defined public IP addresses (endpoints). Some endpoints are standard and the rest can be defined by the customer, which is used to determine what traffic can pass through the cloud service (public IP) to the virtual network resource. Native Azure ...