Why do we have Azure SQL Server addresses both with and without secure in the name. For example, I have an address xxx.yyy.secure.zzz and xxx.yyy.zzz . Both represent the same database server. My plan is to stop using the former address, in favor of the latter. Then, clean up our firewall rules to disallow access to xxx.yyy.secure.zzz .

Ed, My apologies. I was able to contact a MSFT engineer that was involved on creating those server.database.secure.windows.net domains. He said the secure.database.windows.net connects to a security proxy in the region. It was intended for use with Sql Auditing and clients <TDS 7.0. However, at this time SQL AUditing no longer uses that domain. That domain was documented previously on Microsoft Learn but as SQL Auditing was no longer using it, then that part of the documentation was removed. So you can safely remove those entries related to The xxxxxx.secure.database.windows.net and leave the only those entries with domain names like xxxxx..database.windows.net . My apologies again. Thank you for visiting Microsoft QA forums.

Azure SQL Server addresses with *secure* in the name

Accepted answer

Alberto Morillo 33,536 Reputation points MVP

2022-02-16T16:15:22.44+00:00

Ed,

My apologies. I was able to contact a MSFT engineer that was involved on creating those server.database.secure.windows.net domains. He said the secure.database.windows.net connects to a security proxy in the region. It was intended for use with Sql Auditing and clients <TDS 7.0. However, at this time SQL AUditing no longer uses that domain. That domain was documented previously on Microsoft Learn but as SQL Auditing was no longer using it, then that part of the documentation was removed.

So you can safely remove those entries related to The xxxxxx.secure.database.windows.net and leave the only those entries with domain names like xxxxx..database.windows.net .

My apologies again.

Thank you for visiting Microsoft QA forums.
Please sign in to rate this answer.
Best, Ed 31 Reputation points

2022-02-16T16:33:31.957+00:00

Thanks, Alberto.

I trust that what you're saying is true. It sounds correct and makes sense.

However, do you know of any place where I can get documentation on that, please?

Best, Ed 31 Reputation points

2022-02-16T16:34:29.52+00:00

@Alberto Morillo
Re-posting, to notify Alberto.

-------------------

Thanks, Alberto.

I trust that what you're saying is true. It sounds correct and makes sense.

However, do you know of any place where I can get documentation on that, please?

Alberto Morillo 33,536 Reputation points MVP

2022-02-16T16:43:13.643+00:00

Ed,

I have not seen this on Microsoft Learn. Let me share this feedback with MSFT team.

Alberto Morillo 33,536 Reputation points MVP

2022-02-16T19:30:31.097+00:00

@Best, Ed Please see my answer corrected as I received information directly from MSFT engineer involved with those secure domains. My apologies.

Best, Ed 31 Reputation points

2022-02-16T19:34:49.067+00:00

Thanks, @Alberto Morillo

From what could find and experiment with, all traffic to/from the Azure db's is encrypted. That last thing you said is consistent with what I found.

Also, I found some references on the subject of 'auditing' too. We don't ever use it so, it doesn't matter.

Thanks, again.

Alberto Morillo 33,536 Reputation points MVP

2022-02-16T19:48:54.817+00:00

Thank you for bringing this question to the forum. I learned some interesting things in search for the right answer and I also removed ignorance from my mind. This has been a really good day. Thank you for visiting Microsoft QA forums!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure SQL Server addresses with secure in the name

0 additional answers

Your answer