Azure file storage can not be accessed by Chinese Engineer

Melody Mo (Lionbridge) 0 Reputation points Microsoft Vendor
2023-05-09T04:31:53.73+00:00

We created a file shared in Azure, but the Chinese Engineer can not access to the file shared, we got error like this, can anyone help? it is problem in China firewall?

User's image

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,170 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. deherman-MSFT 33,626 Reputation points Microsoft Employee
    2023-05-09T15:20:31.8833333+00:00

    @Melody Mo (Lionbridge)

    Port 445 is frequently blocked by ISPs. It is very likely that the China ISP or Great Firewall is blocking the port. There are several workarounds that can be used:

    Solution 1 — Use Azure File Sync as a QUIC endpoint You can use Azure File Sync as a workaround to access Azure Files from clients that have port 445 blocked. Although Azure Files doesn't directly support SMB over QUIC, Windows Server 2022 Azure Edition does support the QUIC protocol. You can create a lightweight cache of your Azure file shares on a Windows Server 2022 Azure Edition VM using Azure File Sync. This configuration uses port 443, which is widely open outbound to support HTTPS, instead of port 445. To learn more about this option, see SMB over QUIC with Azure File Sync.

    Solution 2 — Use VPN or ExpressRoute By setting up a VPN or ExpressRoute from on-premises to your Azure storage account, with Azure Files exposed on your internal network using private endpoints, the traffic will go through a secure tunnel as opposed to over the internet. Follow the instructions to setup VPN to access Azure Files from Windows.

    Solution 3 — (Not likely, in this case) Unblock port 445 with help from your ISP/IT admin Work with your IT department or ISP to open port 445 outbound to Azure IP ranges.

    Solution 4 — Use REST API-based tools like Storage Explorer/PowerShell Azure Files also supports REST in addition to SMB. REST access works over port 443 (standard tcp). There are various tools that are written using REST API that enable a rich UI experience. Storage Explorer is one of them. Download and Install Storage Explorer and connect to your file share backed by Azure Files. You can also use PowerShell which also uses REST API.

    Hope this helps! Let us know if you have anymore questions.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments