This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 0%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Hi
I have 2 environment one is prod and another one is no- prod .
Non- prod
in non-prod environment I have created blob storage and try to access from SFTP client and its all working as expected . In the non- prod we have given the storage account firewall setting as "enable from all the networks" and its works from sftp client without issue .
Prod
in prod environment we have selected the storage account firewall setting as "enabled from selected networks " while copy file manually its working but while connecting via sftp client its getting error as attached. its not connecting .
Please suggest what could be the reason.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 10%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAP%3C/text%3E%3C/svg%3E)
@nadha- Just checking in to see if the below-answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
@nadha- Just checking in to see if the below-answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Hi @nadha ,
are you connecting to the prod Azure Blob Storage by SFTP from an Azure VM or from your on-premises computer?
Did you add your local computer IP to the Firewall section of the prod Storage Account?
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten
in Prod we are testing 2 scenario. First one we have VDI (on prem VDI) and Azure VM we have tested its working without issue.
Second scenario we are testing from public (internet) Pc with sftp client in that scenario its not working.
Non- prod
In the non- prod we have given the storage account firewall setting as "enable from all the networks" when we test from public (internet ) with sftp client its working .
What is the secure design we can use to connect to prod with public pc .
@nadha, thank you for posting your query here!
If you have tested and confirmed that your setup works in a non-production (non-prod) environment with the storage account firewall setting "enabled from all networks," but you are facing connectivity issues when testing from a public PC with an SFTP client in your production (prod) environment, there are several factors to consider in order to securely allow SFTP access from a public PC to your Azure Blob Storage in the production environment:
Firewall Settings:
As for prod environment you have selected the storage account firewall setting as "enabled from selected networks ", please confirm that the public IP address of the PC from which you are attempting to connect is correctly included in the list of allowed networks in the Azure Blob Storage firewall settings.
SFTP Client Configuration:
Please verify that your SFTP client is configured correctly to connect to Azure Blob Storage. Check that you are using the correct hostname, port (SFTP typically uses port 22), username and password.
Ensure that your SFTP client uses secure SFTP protocols.
Public PC Firewall and Proxy:
Kindly check if the public PC has any local firewall or proxy settings that might be blocking the SFTP connection. You may temporarily disable local firewalls for testing purposes and check.
For limitation and known issues with SFTP, please refer: https://learn.microsoft.com/en-us/azure/storage/blobs/secure-file-transfer-protocol-known-issues
If you've checked all these points and are still experiencing issues, it may be helpful to provide specific error messages or details about the issue you're encountering.
Please let us know if you have any further queries. I’m happy to assist you further.
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.