I can't connect to a storage account from another country

Question

I can't connect to a storage account from another country

Matthew Bx 0

Hi, I created a storage account and can connect fine from the region where the storage account resides (Asia Pacific) if I am also in the same region. If an attempt to connect is made from our US based office, the connection just times out.

There are no networking rules in place that should be causing this.

Can't understand why this happening.

Any help appreciated, cheers.

SaiKishor-MSFT 16,656 Reputation points Microsoft Employee

2023-03-09T18:41:08.6733333+00:00

@Matthew Bx I am reaching out to see if you have any further questions. If so, please let us know and we will be glad to assist further. If the below answer was helpful, please make sure to Accept it as answer as it helps other members in the community. Thank you!
SaiKishor-MSFT 16,656 Reputation points Microsoft Employee

2023-03-15T19:47:20.4833333+00:00

@Matthew Bx If you still have questions, please let us know in the "comments" and we would be happy to help you.

If any of the replies below has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!

SaiKishor-MSFT 16,656 Reputation points Microsoft Employee

2023-03-09T18:41:08.6733333+00:00

@Matthew Bx I am reaching out to see if you have any further questions. If so, please let us know and we will be glad to assist further. If the below answer was helpful, please make sure to Accept it as answer as it helps other members in the community. Thank you!
SaiKishor-MSFT 16,656 Reputation points Microsoft Employee

2023-03-15T19:47:20.4833333+00:00

@Matthew Bx If you still have questions, please let us know in the "comments" and we would be happy to help you.

If any of the replies below has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!

Answer 1

Bjoern Peters 8,196 MVP

Hi Matthew,

Welcome to Q&A Forum, this is a great place to get support, answers and tips.

Thank you for posting your query, I'll be more than glad to help you out.

you might be right, that there aren't any specific network rules that you have implemented BUT there might be some to secure your US based office, or better how is your US based office connected to the storage account and/or to your Azure network?

If you can reach that storage account via (public) internet from your location then it should be also possible to reach that SA from a different location via (public) internet! If not, there might be a blocking issue somewhere in your network configuration.

Maybe this post might help you to troubleshoot your connection issue...

https://techcommunity.microsoft.com/t5/azure-paas-blog/troubleshooting-connectivity-to-blob-storage-using-azure-storage/ba-p/2173908

I hope my answer is helpful to you,

Your

Bjoern Peters

If the reply was helpful, please upvote and/or accept it as an answer, as this helps others in the community with similar questions. Thanks!

Matthew Bx 0 Reputation points

2023-03-07T04:29:07.56+00:00

Hi Bjoern, I appreciate your suggestions and thoughts. I should have been clearer on my troubleshooting of this issue.

There is a storage account within Azure that I can connect to from my office and home address in Australia. I can connect via a Windows device or a Mac device. My colleague in Texas can't connect from her Mac device. I thought it may be an issue with the MacBook however our Texas based MSP also can't connect from a Windows device. To troubleshoot I connected my device to a VPN and made my routable IP appear to come from the US. As soon as I did this my connection to the storage account dropped out and I was not able to reconnect until I disconnected the VPN and reverted back to an Australian based routable IP address. There must be some policy blocking connections from certain IPs (location based maybe?)

Cheers

Matthew
SaiKishor-MSFT 16,656 Reputation points Microsoft Employee

2023-03-08T23:44:55.1466667+00:00
@Matthew Bx Thanks for reaching out to Microsoft Q&A.

I understand that you are having issues with connectivity to your storage account from US based clients.

Please let me know the following-

What service in Azure storage are you connecting to?

Are the clients in US able to resolve the IP address to this service?

Have you done a traceroute (regular and TCP based) to determine if the traffic is reaching Microsoft from the clients?

Can you capture this trafic using a packet capture tool such as Wireshark, Fiddler etc.,?

Do you have any firewall rules configured on the storage account? Do you have Microsoft routing or Internet based routing?

Do your clients connect directly to the public endpoint or via VPN/ER?

Are there any location condition policy configured for your organization? - https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/active-directory/conditional-access/location-condition.md

Can you connect to other services from the US location?

Please let me know. Thank you!

I can't connect to a storage account from another country

1 answer

Activity