You have site-to-site VPN between on-premise network and Azure and want to make sure that the traffic from your Azure Vitual Machines will be routed through the virtual appliance that is placed in the on-premises network. How will you achieve this?