Access blob storage account behind on-premise firewall

bcb44 86 Reputation points
2021-06-29T01:07:12.74+00:00

Im trying to access Azure Blob storage behind an on-premise firewall. I've whitelisted https://(mystorageaccount).blob.core.windows.net and have opened port 443. I'm still not able to upload.
Is there any other site I need to whitelist in order to access blob storage? The firewall is very restrictive and doesnt allow connections except to explicitly whitelisted urls. I saw on another site https://forums.veeam.com/object-storage-f52/used-ports-and-urls-for-azure-blob-storage-t57784.html#top that I might need to whitelist ocsp.msocsp.com to allow my storage client to validate the tls connection but that seems unlikely to me

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,415 questions
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Sumarigo-MSFT 43,401 Reputation points Microsoft Employee
    2021-06-29T10:25:06.263+00:00

    @bcb44 Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

    • Do you get any error message or error code, If so can you please share the screenshot of the error?
    • Can you add the specific IP address(Add IP ranges to allow access from the internet or your on-premises networks)

    110235-image.png

    Find the Azure IP Ranges and Service Tags – Public Cloud scope a region where your Azure Storage located. Whitelist the IP list in the storage account firewall

    Configure Azure Storage firewalls and virtual networks
    Note: NSG to restrict inbound and outbound traffics from this Azure VNet.

    Hope this helps!
    Kindly let us know if the above helps or you need further assistance on this issue.

    ---------------------------------------------------------------------------------------------------------------------------------------

    Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments No comments