How can I set the Notification receiving IP address to a fixed IP address?

Question

our environment is limited network environment, mobile WIFI also has to be connected to company network without internet connection,

but we can allow connection using firewall configuration allowing ip address and port,

but we did not allow range of ip address,

so how can we set notification endpoint ip address as fixed ip address

Answer 1

Hello Lee, Jong Kwan

Thanks for reaching out in the Microsoft Q&A!

To ensure notifications are securely received in a limited network environment, you can set up a bastion host within the Azure Virtual Network (VNet). This bastion host serves as a secure gateway. Firstly, create a virtual machine (VM) designated as the bastion host within your Azure environment. Next, configure the Azure notification service to send notifications specifically to the fixed IP address of this bastion host. Within the bastion host, establish a secure tunnel, such as a VPN connection, to securely connect Azure to your internal network. Finally, configure the network firewall to allow inbound traffic only from the bastion host, ensuring that notifications are received from trusted sources. By following these steps and implementing a bastion host, you can reliably and securely receive notifications within your limited network environment.

If you found this solution helpful, consider accepting it.

Answer 2

Hi Cowthan

great thanks for the sharing knowledge,

but we want to use fixed public ip address for the notification hub,

because we can not create vpn between our network and azure private network.

we can only allow fixed ip address using notification hub including inbound and outbound

Answer 3

Based on my understanding of your scenario, to could try allowing mobile notifications through services like Firebase Cloud Messaging (FCM) or GCM while using a fixed open IP address, you'll need to configure your network to permit traffic to specific IP addresses and ports used by these services.

Typically, with the required IP addresses and ports identified, you need to configure your network to allow outgoing traffic to these addresses. This usually involves setting up firewall rules or access control lists (ACLs) on your router or firewall.

Note: be aware that using a fixed open IP address can be less secure compared to using a VPN or other secure connection methods. It is important to implement appropriate security measures to protect your network and devices from unauthorized access.