Clients inside the network cannot connect to Azure SQL Database using SQL Studio.

Question

Clients inside the network cannot connect to Azure SQL Database using SQL Studio.

Perez, Alexis (ACS) 0

We are trying to establish a connection to an SQL Database on Azure using SQL studio. We are receiving the error message below.

User's image

Perez, Alexis (ACS) 0 Reputation points

2024-10-29T17:00:55.5333333+00:00

Sorry for the delay in responding. Our connection policy in the Azure portal is proxy. We are not using VPN. We are using an Internal Proxy, and I am pretty sure that's where the issue is. When the DBA takes the laptop to her home network, she can connect using Visual Studio without issues. Is there any documentation available so I can provide it to our Proxy team?

Thanks for the help, it is much appreciated.
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-29T19:12:40.1433333+00:00

@Perez, Alexis (ACS) Thank you for getting back to me.

The internal proxy might be causing the connection issues.

Proxy: In this mode, all connections are proxied via the Azure SQL Database gateways, leading to increased latency and reduced throughput. For connections to use this mode, clients need to allow outbound communication from the client to Azure SQL Database gateway IP addresses on port 1433. Read more here.

When using the Proxy connection policy, refer to the Gateway IP addresses list later in this article for your region's IP addresses to allow.

Here are some useful resources and documentation that you can share with your Proxy team.

The below documents explain the different connection policies, including the Proxy policy, and how they impact network traffic. It also provides details on how connections are established and managed.

Azure SQL Database Connectivity Architecture:

https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings?view=azuresql&tabs=azure-portal

If you are still not able to connect, you can file a support ticket so we can further assist.

Regards,

Oury
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-29T19:43:43.1033333+00:00

@Perez, Alexis (ACS) Could you please take a screen shot of your azure sql server network configuration page.

Was a private endpoint enabled?

2 answers

Your answer

Perez, Alexis (ACS) 0 Reputation points

2024-10-29T17:00:55.5333333+00:00

Sorry for the delay in responding. Our connection policy in the Azure portal is proxy. We are not using VPN. We are using an Internal Proxy, and I am pretty sure that's where the issue is. When the DBA takes the laptop to her home network, she can connect using Visual Studio without issues. Is there any documentation available so I can provide it to our Proxy team?

Thanks for the help, it is much appreciated.
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-29T19:12:40.1433333+00:00

@Perez, Alexis (ACS) Thank you for getting back to me.

The internal proxy might be causing the connection issues.

Proxy: In this mode, all connections are proxied via the Azure SQL Database gateways, leading to increased latency and reduced throughput. For connections to use this mode, clients need to allow outbound communication from the client to Azure SQL Database gateway IP addresses on port 1433. Read more here.

When using the Proxy connection policy, refer to the Gateway IP addresses list later in this article for your region's IP addresses to allow.

Here are some useful resources and documentation that you can share with your Proxy team.

The below documents explain the different connection policies, including the Proxy policy, and how they impact network traffic. It also provides details on how connections are established and managed.

Azure SQL Database Connectivity Architecture:

https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings?view=azuresql&tabs=azure-portal

If you are still not able to connect, you can file a support ticket so we can further assist.

Regards,

Oury
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-29T19:43:43.1033333+00:00

@Perez, Alexis (ACS) Could you please take a screen shot of your azure sql server network configuration page.

Was a private endpoint enabled?

Answer 1

hossein jalilian 13,280 Volunteer Moderator

Thanks for posting your question in the Microsoft Q&A forum.

Azure SQL Database requires TLS 1.2 by default. Make sure your client machine supports TLS 1.2.
In SSMS connection properties, ensure "Encrypt connection" is set to TRUE
Verify that the user attempting to log in has access to the selected database with at least the minimum required permissions.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-23T20:12:38.9433333+00:00

Perez, Alexis (ACS) Thank you for reaching out. In addition to hossein jalilian's answer.

Could you please try disconnecting from VPN if you are connected as suggested on this thread https://learn.microsoft.com/en-us/answers/questions/299347/ssms-the-semaphore-timeout-period-has-expired

You can also check for drivers update.

What is your connection policy in the Azure portal. Default, redirect or proxy?

Regards,

Oury
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-23T21:09:37.4866667+00:00

Perez, Alexis (ACS)

If that does not resolve the issue. You can create a support ticket so we can further investigate at the back end.

Regards,

Oury
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-10-24T18:46:01.11+00:00

Perez, Alexis (ACS)

We haven't heard back from you. Could you please share status of the issue.

Regards,

Oury

Answer 2

Perez, Alexis (ACS) 0

@Oury Ba-MSFT Thanks for your replay. Yes we have several endpoints enabled. Those located in the Home Networks can connect fine, those in the corporate cannot.

User's image

Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-11-01T16:09:55.22+00:00

@Perez, Alexis (ACS)

Could you please capture [network traces](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fazure%2Fazure-web-pubsub%2Fhowto-troubleshoot-network-trace&data=05%7C01%7Couryba%40microsoft.com%7C5db0d27b86e3489c8ae908db55b465d7%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638198005525266173%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=VruWmEMFhR46b5v46hSTyEnP8e2RZZIJXQoMY0K5M4Y%3D&reserved=0"Original URL: https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-troubleshoot-network-trace. Click or tap if you trust this link.") to validate if there are network delays. You can open a support ticket so we can take a closer look.

Regards,

Oury
Perez, Alexis (ACS) 0 Reputation points

2024-11-06T18:51:55.44+00:00

Thanks. I will open a support ticket.
Oury Ba-MSFT 21,126 Reputation points Microsoft Employee Moderator

2024-11-08T19:16:08.8466667+00:00

@Perez, Alexis (ACS)

Could you please share the support ticket to track internally?

Once the issue has been resolved with the help of support, please do share the resolution, which might be beneficial to other community members reading this thread.

Share via

Clients inside the network cannot connect to Azure SQL Database using SQL Studio.

2 answers

Your answer