Azure AI Search
An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
865 questions
We are using the Azure firewall to limit access to resources but now our Azure OpenAI resource can't connect to our Cognitive Search Service
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 74%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIS%3C/text%3E%3C/svg%3E)
IT Services
0
Reputation points
No private Endpoint and currently accessing our resources for testing over the public internet.
We did "Allow access from the Azure portal IP address" but as expected made no difference
What basic mistake have I made?
If I allow all networks for the Search service, we have no issues
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 74%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
AshokPeddakotla-MSFT 30,511 Reputation points2023-07-27T07:26:22.9233333+00:00 IT Services Greetings!
No private Endpoint and currently accessing our resources for testing over the public internet.
Are you saying you don't have private endpoint and still you can't access? What is the error message you are getting?
I understand that you have allowed access from the Azure portal IP address. Please note that Azure OpenAI on your data does not currently support private endpoints.
Our team is actively working on supporting this scenario and we do not have an exact ETA at this moment.
Please see Virtual network support & private link support
Do let us know if you have any further queries.
-
IT Services 0 Reputation points
2023-07-27T08:50:46.2933333+00:00 Hi we want to lock the Azure OpenAI Service to only be available from certain public IP's which works fine
However, when we lock the Azure Cognitive Search to the same public IP's, we are unable to access Search from Open AI.
Are we over thinking this and do we need to IP limit access to Azure Cognitive Search, I assume we do to ensure third parties can't access our Cognitive Search?
I welcome your comments
Thanks
-
AshokPeddakotla-MSFT 30,511 Reputation points
2023-07-31T14:51:56.33+00:00 IT Services If you have already locked down the Azure OpenAI Service to only be available from certain public IP addresses, you may not need to IP limit access to Azure Cognitive Search. However, this depends on your specific security requirements.
When you lock the Azure OpenAI Service to certain public IPs, it only restricts access to the OpenAI Service. It does not automatically restrict access to other Azure services, such as Azure Cognitive Search. Therefore, you need to configure IP control policies for Azure Cognitive Search separately to restrict access to it**.**
You can set IP rules for Azure Cognitive Search in the Azure portal, as described in this article: Configure an IP firewall for Azure Cognitive Search.
Also, see similar issue which has been discussed here for more information.
Let me know if you have any further queries.
Sign in to comment