Allow Azure Analysis Service & Azure DevOps through Azure Firewall

Muhammad Hammad Naeem 45 Reputation points
2023-08-11T11:12:23.82+00:00

I am using Azure Basic Firewall and have applied DNAT rules to allow SQL access for specific IP ranges. However, this has caused issues with communication between Analysis Service and Azure DevOps. When I remove the IP restriction and set the Source to Any, communication resumes. I am seeking the correct IP ranges for Analysis Services and Azure DevOps. I have tried using the IP ranges in the provided link, but the issue persists.https://learn.microsoft.com/en-us/azure/devops/organizations/security/allow-list-ip-url?view=azure-devops&tabs=IP-V4

Azure Analysis Services
Azure Analysis Services
An Azure service that provides an enterprise-grade analytics engine.
438 questions
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
567 questions
{count} votes

1 answer

Sort by: Most helpful
  1. KranthiPakala-MSFT 46,422 Reputation points Microsoft Employee
    2023-08-14T23:43:54+00:00

    @Muhammad Hammad Naeem Welcome to Microsoft Q&A forum and thanks for reaching out here.

    Azure Analysis Services does not use fixed IP addresses or Service Tags. The range of IP addresses your Analysis Services servers use can be anything in the range of IP addresses for the Azure region. You have to provide the full range of IP addresses for the Azure region which you can download from here: Azure IP Ranges and Service Tags – Public Cloud

    For more AAS network related scenarios, please refer to this article: Frequently asked questions about Analysis Services network connectivity

    Hope this info helps.


    Please don’t forget to Accept Answer and Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.

    0 comments No comments