Disabled Network Access does not work on Cognitive services

Sneh Chauhan 30

I have disabled the network access to my Computer vision resource. It is still accepting ping and serving requests to the endpoint "https://<myresource>.cognitiveservices.azure.com/". Why is it so? It's been more than an hour since I set the network access to disabled. I have no private endpoint setup yet. User's image

Deepanshukatara-6769 10,300 Reputation points

2024-06-20T06:49:43.23+00:00
Hi Sneh, Welcome to MS Q&A

Sometimes, changes in network settings can take some time to propagate fully across Azure's infrastructure. Although it's been an hour, there might still be a delay, though it is unusual for it to take this long.

Solutions

Use Azure CLI or PowerShell to double-check and enforce the network access settings: This command will explicitly disable public network access.

az cognitiveservices account update --name <account-name> --resource-group <resource-group-name> --allow-public-network false

If after all these checks your resource is still accessible despite disabling network access, consider raising a support ticket with Azure Support for further assistance. They can provide more detailed insights and help resolve any potential issues with the configuration.

Please let me know , if further questions

Thanks

Deepanshu
Sneh Chauhan 30 Reputation points

2024-06-20T07:09:37.9133333+00:00

Well, that command does not work. But I listed my network rules and found the access to be disabled.

Still it is accepting my pings and serving REST API requests.

1 answer

navba-MSFT 24,985 Reputation points Microsoft Employee

2024-06-20T07:28:03.1333333+00:00

@Sneh Chauhan Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

.

Please note running the ping command to check the disabled network accessibility is not a valid test. The accessibility would be disabled at the data plane level.

.

You can test this feature by signing into the Vision Studio directly and then test any of the features for your custom vision and that should result in 403 error like below:

.

If you see a 403 error that that means that you have successfully disabled, the network access.

.

So no networks can access this resource. Private endpoint connections will be the exclusive way to access this resource.

.

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

**

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.
Sneh Chauhan 30 Reputation points

2024-06-20T07:35:36.5033333+00:00

Thanks for the answer navba.

I am able to access the service through Vision portal as well.

And network access is disabled on my vision resource. Also I don't have any private endpoint set up.

I don't know what's the reason behind this.

navba-MSFT 24,985 Reputation points Microsoft Employee

2024-06-20T07:41:33.7633333+00:00

@Sneh Chauhan Thanks for your reply. Let me create a custom vision resource and try the same at my end too. I will get back once I have an update.

Sneh Chauhan 30 Reputation points

2024-06-20T09:25:08.18+00:00

UPDATE: Now it started working as it should.

Thanks for your time.

navba-MSFT 24,985 Reputation points Microsoft Employee

2024-06-20T10:30:21.5966667+00:00

@Sneh Chauhan Thanks for the update. I am glad the issue is resolved. If you encounter the issue again, please feel free to reach out to us and we would be happy to help.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Disabled Network Access does not work on Cognitive services

1 answer

Your answer