Azure SQL Database connctivity

Question

Azure SQL Database connctivity

Ankush Gurjar 170

Hi Team,

I have deployed azure SQL database service and I want to connect this database within the private network or office network, which configuration need to do from azure side. which IP need to whitelist from our office network?

Thanks in advance!

Ankush Gurjar 170 Reputation points

2024-04-30T06:35:49.4433333+00:00

Hi,

Which public IP needs to whitelist, please provide the steps.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-01T16:49:09.9666667+00:00

Ankush Gurjar Please check the below answers and let us know if you have additional queries.

Please don't forget to mark as accept answer wherever information provided were helpful.

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-03T04:54:07.53+00:00

Hi Oury,

could you please tell me which public IP or link needs to be allow in my office network firewall so that connection will established.

Thanks

Answer accepted by question author

Oury Ba-MSFT 21,156 Microsoft Employee Moderator

Ankush Gurjar

Thank you for reaching out.

In addition to Umar's answer below. To connect your Azure SQL Database within a private network or office network, you can use Azure Private Endpoint. Tutorial: Connect to an Azure SQL server using an Azure Private Endpoint using the Azure portal.

Whitelisting a public IP address involves adding it to the server firewall rules in the Azure portal, ensuring secure access to your Azure SQL Database from your office network. Azure SQL Database and Azure Synapse IP firewall rules.

Regards,

Oury

Ankush Gurjar 170 Reputation points

2024-05-02T05:22:35.3666667+00:00

Hi @Oury,

I know the steps and we have already created the Azure private endpoint, but my question is we need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will established.

addition do we need VPN in this scenario?

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-02T19:54:58.48+00:00

Ankush Gurjar

Thank you for accepting the answer!

"We need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will be established".

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

VPN Requirement:

If your office network is already connected to Azure via a VPN (Virtual Private Network) or ExpressRoute, you can use the private endpoint without any additional configuration.

If you want to connect from your office network directly to the private endpoint, you can use the FQDN provided by the private endpoint.

No public IP addresses are involved, and the connection remains secure.

You don’t need to set up a VPN specifically for this scenario.

Useful links

https://techcommunity.microsoft.com/t5/azure-database-support-blog/azure-sql-db-private-link-private-endpoint-connectivity/ba-p/1235573

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-03T09:59:58.0066667+00:00

Hi Oury,

I am still unable to connect SQL DB from my office network,

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

You are saying don't need to whitelist specific IP so how to connection will establish from both side if I have not allow any IP in my office network?

Regards
Ankush Gurjar 170 Reputation points

2024-05-03T10:31:45.53+00:00

Screenshot attached for your reference
Ankush Gurjar 170 Reputation points

2024-05-03T12:03:12.94+00:00

Hi Oury,

Additionally I want to connect this DB via SQL Server Management Studio (SSMS) from my office network.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-03T16:09:06.14+00:00

Ankush Gurjar

Thank you for letting us know. Which authentication method are you trying to connect.

AAD integrated, MFA or SQL authentication?

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-06T06:30:16.52+00:00

Hi Oury,

Sorry for the late reply we are trying SQL server authentication to connect my DB from my office network.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-06T22:44:29.9366667+00:00
Ankush Gurjar

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for.

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

Point-to-Site connection

Site-to-Site VPN connection

ExpressRoute circuit
Ankush Gurjar 170 Reputation points

2024-05-07T10:06:45.6066667+00:00

Hi @Oury Ba-MSFT

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

In the above steps showing DB connecting using azure VM, but my office network is different.

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

It is necessary to implement one of this option to establish the connection?

or do we have some different solution.

Regards

1 additional answer

Your answer

Ankush Gurjar 170 Reputation points

2024-04-30T06:35:49.4433333+00:00

Hi,

Which public IP needs to whitelist, please provide the steps.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-01T16:49:09.9666667+00:00

Ankush Gurjar Please check the below answers and let us know if you have additional queries.

Please don't forget to mark as accept answer wherever information provided were helpful.

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-03T04:54:07.53+00:00

Hi Oury,

could you please tell me which public IP or link needs to be allow in my office network firewall so that connection will established.

Thanks
Ankush Gurjar 170 Reputation points

2024-05-02T05:22:35.3666667+00:00

Hi @Oury,

I know the steps and we have already created the Azure private endpoint, but my question is we need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will established.

addition do we need VPN in this scenario?

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-02T19:54:58.48+00:00

Ankush Gurjar

Thank you for accepting the answer!

"We need to allow some IP in my office network firewall, I want know which IP should allow in my office firewall so that connection will be established".

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

VPN Requirement:

If your office network is already connected to Azure via a VPN (Virtual Private Network) or ExpressRoute, you can use the private endpoint without any additional configuration.

If you want to connect from your office network directly to the private endpoint, you can use the FQDN provided by the private endpoint.

No public IP addresses are involved, and the connection remains secure.

You don’t need to set up a VPN specifically for this scenario.

Useful links

https://techcommunity.microsoft.com/t5/azure-database-support-blog/azure-sql-db-private-link-private-endpoint-connectivity/ba-p/1235573

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-03T09:59:58.0066667+00:00

Hi Oury,

I am still unable to connect SQL DB from my office network,

When using a private endpoint for Azure SQL Database, you don’t need to whitelist specific public IP addresses. Instead, you’ll connect to the database using the private endpoint’s fully qualified domain name (FQDN).

You are saying don't need to whitelist specific IP so how to connection will establish from both side if I have not allow any IP in my office network?

Regards
Ankush Gurjar 170 Reputation points

2024-05-03T10:31:45.53+00:00

Screenshot attached for your reference
Ankush Gurjar 170 Reputation points

2024-05-03T12:03:12.94+00:00

Hi Oury,

Additionally I want to connect this DB via SQL Server Management Studio (SSMS) from my office network.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-03T16:09:06.14+00:00

Ankush Gurjar

Thank you for letting us know. Which authentication method are you trying to connect.

AAD integrated, MFA or SQL authentication?

Regards,

Oury
Ankush Gurjar 170 Reputation points

2024-05-06T06:30:16.52+00:00

Hi Oury,

Sorry for the late reply we are trying SQL server authentication to connect my DB from my office network.

Regards
Oury Ba-MSFT 21,156 Reputation points Microsoft Employee Moderator

2024-05-06T22:44:29.9366667+00:00

Ankush Gurjar

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for.

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

Point-to-Site connection

Site-to-Site VPN connection

ExpressRoute circuit
Ankush Gurjar 170 Reputation points

2024-05-07T10:06:45.6066667+00:00

Hi @Oury Ba-MSFT

No worries. Please try to follow the link step by step. It should you help achieved what you are looking for

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql

In the above steps showing DB connecting using azure VM, but my office network is different.

To establish connectivity from an on-premises environment to the database in SQL Database, choose and implement one of the options:

It is necessary to implement one of this option to establish the connection?

or do we have some different solution.

Regards

Answer 1

Umar 150

To connect your Azure SQL Database within a private network or office network, you'll want to set up Azure Private Link. This allows you to access Azure services (like SQL Database) privately from within your virtual network. Additionally, you'll need to whitelist the public IP address of your office network to allow access. Would you like more detailed steps on how to configure this?

Ankush Gurjar 170 Reputation points

2024-04-30T07:00:59.9+00:00

Hi,

Which public IP needs to whitelist, please provide the steps.

Regards

Share via

Azure SQL Database connctivity

1 additional answer

Your answer