Sophos UTM on Azure to on Premise Sophos UTM

Question

Hi Guys, 
 Just for experiment... 
 I've an Azure MSDN subscription and site-to-site between my home Sophos UTM and my my Azure instance. 
 What I want is create another Sophos UTM and host it on Azure and assign it a static public IP. Create a inbound firewall rule in network security group that allows port 80 traffic for example which goes to Sophos UTM on Azure which then forwards the request to my on premise Sophos UTM. This way incoming traffic comes across two firewalls also my home UTM doesn't get exposed to internet. 
 Can someone point me out to how I can achieve this if possible. 
 
 Cheers Mo

Jaydeep · Answer

Assuming that you're able to create a UTM9 or XG instance on Azure, all you need is to create a DNAT/Full NAT rule on your UTM/XG's Public IP and forward that to the LAN IP of the Home UTM. Now for this to work, you must have your HomeUTM's Internal network configure as Local network on IPsec site to site tunnel to Azure

Regards

Jaydeep