Hi Team, I have deployed azure SQL database service and I want to connect this database within the private network or office network, which configuration need to do from azure side. which IP need to whitelist from our office network? Thanks in advance!

Ankush Gurjar Thank you for reaching out. In addition to Umar 's answer below. To connect your Azure SQL Database within a private network or office network, you can use Azure Private Endpoint . Tutorial: Connect to an Azure SQL server using an Azure Private Endpoint using the Azure portal . Whitelisting a public IP address involves adding it to the server firewall rules in the Azure portal, ensuring secure access to your Azure SQL Database from your office network. Azure SQL Database and Azure Synapse IP firewall rules . Regards, Oury

To connect your Azure SQL Database within a private network or office network, you'll want to set up Azure Private Link. This allows you to access Azure services (like SQL Database) privately from within your virtual network. Additionally, you'll need to whitelist the public IP address of your office network to allow access. Would you like more detailed steps on how to configure this?

Azure SQL Database connctivity

Accepted answer

Oury Ba-MSFT 16,731 Reputation points Microsoft Employee

2024-04-30T16:36:24.7033333+00:00

Ankush Gurjar

Thank you for reaching out.

In addition to Umar's answer below. To connect your Azure SQL Database within a private network or office network, you can use Azure Private Endpoint. Tutorial: Connect to an Azure SQL server using an Azure Private Endpoint using the Azure portal.

Whitelisting a public IP address involves adding it to the server firewall rules in the Azure portal, ensuring secure access to your Azure SQL Database from your office network. Azure SQL Database and Azure Synapse IP firewall rules.

Regards,

Oury
Please sign in to rate this answer.
Ankush Gurjar 160 Reputation points

2024-05-02T05:22:35.3666667+00:00

Hi @Oury,

I know the steps and we have already created the Azure private endpoint, but my question is we need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will established.

addition do we need VPN in this scenario?

Regards

Oury Ba-MSFT 16,731 Reputation points Microsoft Employee

2024-05-02T19:54:58.48+00:00

Ankush Gurjar

Thank you for accepting the answer!

"We need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will be established".

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

VPN Requirement:

If your office network is already connected to Azure via a VPN (Virtual Private Network) or ExpressRoute, you can use the private endpoint without any additional configuration.

If you want to connect from your office network directly to the private endpoint, you can use the FQDN provided by the private endpoint.

No public IP addresses are involved, and the connection remains secure.

You don’t need to set up a VPN specifically for this scenario.

Useful links

https://techcommunity.microsoft.com/t5/azure-database-support-blog/azure-sql-db-private-link-private-endpoint-connectivity/ba-p/1235573

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

Regards,

Oury

Ankush Gurjar 160 Reputation points

2024-05-03T09:59:58.0066667+00:00

Hi Oury,

I am still unable to connect SQL DB from my office network,

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

You are saying don't need to whitelist specific IP so how to connection will establish from both side if I have not allow any IP in my office network?

Regards

Ankush Gurjar 160 Reputation points

2024-05-03T10:31:45.53+00:00

Screenshot attached for your reference

Ankush Gurjar 160 Reputation points

2024-05-03T12:03:12.94+00:00

Hi Oury,

Additionally I want to connect this DB via SQL Server Management Studio (SSMS) from my office network.

Regards

Oury Ba-MSFT 16,731 Reputation points Microsoft Employee

2024-05-03T16:09:06.14+00:00

Ankush Gurjar

Thank you for letting us know. Which authentication method are you trying to connect.

AAD integrated, MFA or SQL authentication?

Regards,

Oury

Ankush Gurjar 160 Reputation points

2024-05-06T06:30:16.52+00:00

Hi Oury,

Sorry for the late reply we are trying SQL server authentication to connect my DB from my office network.

Regards

Oury Ba-MSFT 16,731 Reputation points Microsoft Employee

2024-05-06T22:44:29.9366667+00:00

Ankush Gurjar

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for.

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

Point-to-Site connection

Site-to-Site VPN connection

ExpressRoute circuit

Ankush Gurjar 160 Reputation points

2024-05-07T10:06:45.6066667+00:00

Hi @Oury Ba-MSFT

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

In the above steps showing DB connecting using azure VM, but my office network is different.

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

It is necessary to implement one of this option to establish the connection?

or do we have some different solution.

Regards
Sign in to comment

Share via

Azure SQL Database connctivity

1 additional answer