I can't connect to a storage account from another country

Matthew Bx 0

Hi, I created a storage account and can connect fine from the region where the storage account resides (Asia Pacific) if I am also in the same region. If an attempt to connect is made from our US based office, the connection just times out.

There are no networking rules in place that should be causing this.

Can't understand why this happening.

Any help appreciated, cheers.

SaiKishor-MSFT 17,321 Reputation points

2023-03-09T18:41:08.6733333+00:00

@Matthew Bx I am reaching out to see if you have any further questions. If so, please let us know and we will be glad to assist further. If the below answer was helpful, please make sure to Accept it as answer as it helps other members in the community. Thank you!
SaiKishor-MSFT 17,321 Reputation points

2023-03-15T19:47:20.4833333+00:00

@Matthew Bx If you still have questions, please let us know in the "comments" and we would be happy to help you.

If any of the replies below has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!
Sumarigo-MSFT 47,461 Reputation points Microsoft Employee

2023-03-31T02:38:21.88+00:00

@Matthew Bx Just checking in to see if the below answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Bjoern Peters 8,896 Reputation points

2023-03-07T02:07:41.3966667+00:00

Hi Matthew,

Welcome to Q&A Forum, this is a great place to get support, answers and tips.

Thank you for posting your query, I'll be more than glad to help you out.

you might be right, that there aren't any specific network rules that you have implemented BUT there might be some to secure your US based office, or better how is your US based office connected to the storage account and/or to your Azure network?

If you can reach that storage account via (public) internet from your location then it should be also possible to reach that SA from a different location via (public) internet! If not, there might be a blocking issue somewhere in your network configuration.

Maybe this post might help you to troubleshoot your connection issue...

https://techcommunity.microsoft.com/t5/azure-paas-blog/troubleshooting-connectivity-to-blob-storage-using-azure-storage/ba-p/2173908

I hope my answer is helpful to you,

Your

Bjoern Peters

If the reply was helpful, please upvote and/or accept it as an answer, as this helps others in the community with similar questions. Thanks!
Please sign in to rate this answer.
Matthew Bx 0 Reputation points

2023-03-07T04:29:07.56+00:00

Hi Bjoern, I appreciate your suggestions and thoughts. I should have been clearer on my troubleshooting of this issue.

There is a storage account within Azure that I can connect to from my office and home address in Australia. I can connect via a Windows device or a Mac device. My colleague in Texas can't connect from her Mac device. I thought it may be an issue with the MacBook however our Texas based MSP also can't connect from a Windows device. To troubleshoot I connected my device to a VPN and made my routable IP appear to come from the US. As soon as I did this my connection to the storage account dropped out and I was not able to reconnect until I disconnected the VPN and reverted back to an Australian based routable IP address. There must be some policy blocking connections from certain IPs (location based maybe?)

Cheers

Matthew

SaiKishor-MSFT 17,321 Reputation points

2023-03-08T23:44:55.1466667+00:00

@Matthew Bx Thanks for reaching out to Microsoft Q&A.

I understand that you are having issues with connectivity to your storage account from US based clients.

Please let me know the following-

What service in Azure storage are you connecting to?

Are the clients in US able to resolve the IP address to this service?

Have you done a traceroute (regular and TCP based) to determine if the traffic is reaching Microsoft from the clients?

Can you capture this trafic using a packet capture tool such as Wireshark, Fiddler etc.,?

Do you have any firewall rules configured on the storage account? Do you have Microsoft routing or Internet based routing?

Do your clients connect directly to the public endpoint or via VPN/ER?

Are there any location condition policy configured for your organization? - https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/active-directory/conditional-access/location-condition.md

Can you connect to other services from the US location?

Please let me know. Thank you!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I can't connect to a storage account from another country

1 answer

Your answer