Use Translator behind firewalls
Translator can translate behind firewalls using either Domain-name or IP filtering. Domain-name filtering is the preferred method.
If you still require IP filtering, you can get the IP addresses details using service tag. Translator is under the CognitiveServicesManagement service tag.
Configure firewall
Navigate to your Translator resource in the Azure portal.
Select Networking from the Resource Management section.
Under the Firewalls and virtual networks tab, choose Selected Networks and Private Endpoints.
Note
- Once you enable Selected Networks and Private Endpoints, you must use the Virtual Network endpoint to call the Translator. You can't use the standard translator endpoint (
api.cognitive.microsofttranslator.com) and you can't authenticate with an access token. - For more information, see Virtual Network Support.
- Once you enable Selected Networks and Private Endpoints, you must use the Virtual Network endpoint to call the Translator. You can't use the standard translator endpoint (
To grant access to an internet IP range, enter the IP address or address range (in
CIDRnotation) under Firewall > Address Range. Only valid public IP (non-reserved) addresses are accepted.
Running Microsoft Translator from behind a specific IP filtered firewall is not recommended. The setup is likely to break in the future without notice.
The IP addresses for Translator geographical endpoints as of September 21, 2021 are:
| Geography | Base URL (geographical endpoint) | IP Addresses |
|---|---|---|
| United States | api-nam.cognitive.microsofttranslator.com | 20.42.6.144, 20.49.96.128, 40.80.190.224, 40.64.128.192 |
| Europe | api-eur.cognitive.microsofttranslator.com | 20.50.1.16, 20.38.87.129 |
| Asia Pacific | api-apc.cognitive.microsofttranslator.com | 40.80.170.160, 20.43.132.96, 20.37.196.160, 20.43.66.16 |