Route based VPN's and Azure - some information please

Question

Hi everyone. 
 
 I'm quite familiar with setting up policy based VPNs using UTM, but I've now been asked to setup a route based VPN from azure to my company network. I have the following question I'm hoping someone can help me with.... 
 
 1. Can someone explain the difference between Policy based and Route based VPNs - especially in regards to Azure. I think I know the difference, but I'd like confirmation. 
 2. I've been looking at the following links in regards to azure... 
 https://community.sophos.com/kb/en-us/127546 
 https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-multi-site-to-site-resource-manager-portal 
 Am I right in thinking that if I wish to connect one azure site to multiple XG firewalled sites, I have to setup a route policy VPN on azure, create an initial VPN to one XG and then add additional Xg sites as indicated in the microsoft doc above?

LuCar Toni · Accepted Answer

Hi, 
 
 short explanation: The Azure VPN Gateway is a special way how to work with VPN. 
 Because the XG / UTM does not support route based VPNs, but you can build up a VPN Tunnel with IKEv2 with Azure and "play" route based on Azure. 
 https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps 
 On the XG, you are still policy based, but you can use the benefits as a route based VPN on Azure. 
 You need to have IKEv2 and the "SKU VpnGw1, VpnGw2, VpnGw3". 
 Cheers