I have created an Azure OpenAI service and initially allowed access from "All networks." For security reasons, I switched to "Selected networks" and made the following changes: Enabled Azure services to access the service (need to access the openAI service through APP service) Added public IP addresses as firewall rules to allow access to the resource when accessed through localhost. However, after enabling the "Selected networks" option, I am encountering a 500 Internal Server Error response code. from the localhost and from the azure app service side as well Could you please help identify what I might have missed?

Issue with Enabling Selected Networks for Azure OpenAI Service

Mithila Lishan 111

I have created an Azure OpenAI service and initially allowed access from "All networks." For security reasons, I switched to "Selected networks" and made the following changes:

Enabled Azure services to access the service (need to access the openAI service through APP service)
Added public IP addresses as firewall rules to allow access to the resource when accessed through localhost.

However, after enabling the "Selected networks" option, I am encountering a 500 Internal Server Error response code. from the localhost and from the azure app service side as well

Could you please help identify what I might have missed?

Azar 25,375 Reputation points MVP

2024-12-30T17:35:33.5366667+00:00

Hi there Mithila Lishan

Thanks for using QandA platform

First, make sure that the public IP addresses added to the firewall rules match the outbound IP addresses of both your Azure App Service and localhost. For the App Service, include all outbound IPs listed in the Azure Portal under App Service > Networking > Outbound IP Addresses. If its VNET, verify that VNet integration is correctly configured and has access to the Azure OpenAI Service. . Check that your authentication setup is valid, including service principal permissions and the tokens or keys used for accessing the service. If nothing works try Application Insights to capture detailed error logs for further insights. Temporarily reverting to "All networks" this can chewck if its network related issue ir not.

If this helps kindly accept the answer thank much
Mithila Lishan 111 Reputation points

2024-12-31T02:42:05.29+00:00

under "selected network and private endpoints" option i have enable option of "Allow Azure services on the trusted services list to access this cognitive services account" , when i have enabled this option why do i need to add app services additional outbound ip address to the firewall ? that is not necessary right ?

we have not done any VENT configuration

if the authentication setup is invalid we can not access cognitive services account even in the Allow access from "All Networks" right ?
romungi-MSFT 48,406 Reputation points Microsoft Employee

2024-12-31T04:44:32.6833333+00:00

@Mithila Lishan I think this option only includes Azure AI services and does not include App service. See here on what these services are when they are enabled.

Share via

Issue with Enabling Selected Networks for Azure OpenAI Service

Your answer