What are the PORTS need to open in Zscalar Firewall to connect Azure SQL from Power BI Desktop Apps

Question

What are the PORTS need to open in Zscalar Firewall to connect Azure SQL from Power BI Desktop Apps

asked

Hi Every one,
Recently in our organization, Zscalar configured to user machines. we have users , they use Power BI Desktop application to connect Azure SQL Server

Since then ZScalar configured, user facing issue to connect azure SQL Server. Support team tried to kill the zscalar process from task manager , after that it start connecting. But it seems this is temporary solution.

System team asking for ports, servers, DNS URLS etc. so that they can put in the exception for the policy to allow.

As per my understanding, I need to provide source ,destination and ports
source will be user machine IP
Destination will be Azure SQL Server IP (name)
Ports TCP port 1433

Before handover information to system team, I just want to make sure, is above details are correct or I need to provide some details. some more ports etc. Please advise

Answer 1

answered

Alberto Morillo 24,631 Microsoft MVP

It is correct that TCP port 1433 needs to be opened. However, you cannot rely on the current IP address of the Azure SQL Server. The IP address of your logical server is not static and is subject to change at any time. All connections should be made using the fully qualified DNS name (FQDN) rather than the IP address. Please refer to this documentation.

On Azure SQL Database logical server (or at the database level) add the IP of the computer to the whitelist of Azure SQL firewall.

You may also consider creating a private link as explained here.

Mohammad Nadeem Alam 21 Reputation points

2021-05-02T07:26:54.613+00:00

Thanks Alberto Morillo for your reply.

As of now when we enable Zscalar, user face connectivity issue and when we disable Zscalar in user machine connectivity between Power BI desk application and azure sql and azure synapse starts working. (User connects within the organization network)

To sort out the issue permanently, TCP port 1433 to need to be opened from user machine to Azure SQL/Synapse.

I want to understand , regarding private link, is this alternative option to resolve connectivity issue or need to perform both opening port and creating private link. Can you please confirm. Accordingly I have to inform respective team.
Alberto Morillo 24,631 Reputation points Microsoft MVP

2021-05-02T21:56:02.123+00:00

When users use corporate VPN and security software they start receiving errors related with connectivity like this one and the scenario you described. However, these issues disappear when using private link, Azure SQL service endpoints, or when they connect outside their corporate network without the use of that security/VPN software.

What are the PORTS need to open in Zscalar Firewall to connect Azure SQL from Power BI Desktop Apps

0 additional answers

Activity