What Inbound NSG rules need to be added so that we can browse app services after enabling Network policy for Privateendpoint subnet.

Patel, (Rajesh Kumar) 15

We have enabled NSG policy policy for Private endpoint subnet.Now we rae not able to browse our apps, what inbound NSG rule needs to be added,Inernet is blocked in our network.

yulei0917 95 Reputation points

2024-08-13T07:17:22.4633333+00:00

You need to deploy a VM into the same Subnet or Vnet where the private endpoint resides and ensure that NSG rules permit the access from a source of Vnet.
You are now not able to access the private endpoint as your device are not in the Vnet, so there are no private IP for your devices.
Patel, (Rajesh Kumar) 15 Reputation points

2024-08-13T07:29:14.4933333+00:00

Just Adding some more info, Its Azure Apps services(Web Apps & Function Apps) having Private endpoint.We have disabled Public Access & enabled private endpoint for them.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-23T11:19:09.42+00:00

Hi Patel, (Rajesh Kumar),

I wanted to check if you had the opportunity to review the answer posted by useful in resolving your issue.

If it was helpful, please click "Upvote and Accept Answer" on his post to let us know.

We're here to help, so if you have any further questions, don't hesitate to ask.

Regards,

Ganesh Patapati
Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-26T18:35:50.4666667+00:00

Hi Patel, (Rajesh Kumar),

Hope you are doing well.

I wanted to check if you had the opportunity to review the information which was provided in my previous posted answer.

Please Inform us if it was helpful and feel free to reach out to us if you have any queries.

Regards,

Ganesh Patapati
Patel, (Rajesh Kumar) 15 Reputation points

2024-08-27T05:51:31.82+00:00

Hi Ganesh, Thanks for the suggestions. ASP Service tag seems to be right option. For now we have Private endpoints for all the Apps. We have already allowed traffic from APPs subnet to Private endpoint subnet on port 443(For HTTPS only).This should be enough i guess.
Ganesh Patapati (Quadrant Resource LLC) 175 Reputation points Microsoft Vendor

2024-08-27T18:34:28.1133333+00:00

Hi Patel, (Rajesh Kumar),

I’m glad to hear that the information was helpful! I’ve converted my comment into the answer. If it addresses your question, please remember to "Upvote" and "Accept Answer."

This will help others in the community who might have similar issues find the solution more easily. Your contribution is greatly appreciated!

Thank you!

Best regards,

Ganesh Patapati

1 answer

TP 90,151 Reputation points

2024-08-13T08:39:12.7466667+00:00

Hi,

To access your web app/function you would need TCP port 80 and 443, or just 443 if you use https only. Depending on your configuration and requirements, you may need to have a rule that blocks all inbound traffic from the VNet associated with the private endpoint and then a higher priority (lower number) rule to allow port 80/443 traffic only from required IP range.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP
Please sign in to rate this answer.
TP 90,151 Reputation points

2024-08-14T05:43:31.53+00:00

@Patel, (Rajesh Kumar) Any update? Was my answer clear?

TP 90,151 Reputation points

2024-08-21T05:51:22.4933333+00:00

@Patel, (Rajesh Kumar) Please click Accept Answer to close up this thread. If you still need assistance please add a comment.

Thank you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

What Inbound NSG rules need to be added so that we can browse app services after enabling Network policy for Privateendpoint subnet.

1 answer

Your answer