Using cognitive services from an azure VM doesn't transfer any traffic.

John Benson 1

Traffic from an azure Windows VM doesn't appear to be hitting the azure cognitive services. All in the same region.
Using wireshark within the VM shows a lot of TCP retransmissions and the cognitive services show 0 http requests during the attempt so traffic isn't getting there.
Using an onprem VM using the same cognitive service and config works fine.

Tried the usual firewall disabling, NSG changes etc to make sure theres nothing blocking it configuration wise.

Packet capture via network watcher doesn't seem to work anymore..last time I used it with this VM was mid 2024 and now it doesn't save/start any packet captures so now looking to see if anyone has any ideas on why an azure vm can't send traffic to an azure service. Or if theres an alternate way of seeing what azure is doing with the traffic being sent from the VM.

(testing with the network watcher/packet capture is still ongoing to find out why it doesn't start)

If anyones got any ideas/things to try - would be much appreciated..

Thanks.

Geethasri.V 15 Reputation points Microsoft External Staff

2025-02-18T16:38:33.0433333+00:00

Hi John Benson,

Thank you for reaching out to the Microsoft Q&A Platform!

please find below document for more information

https://learn.microsoft.com/en-us/azure/ai-services/cognitive-services-virtual-networks?tabs=portal

Even in on-prem VMs, Azure VMs face issues in sending traffic to Azure Cognitive Services.

Below are tips and reasoning.

• Outbound Internet Connectivity: Ensure that VM has been granted any outbound internet connections. Even in the same region, certain networking allows for some traffic to reach outside services.

• Proxy Settings: If a proxy server is used in the configuration of the VM, ensure that this server is properly set and allows traffic to Azure services.

• VM's NIC Configuration: You should also look at the Network Interface Card (NIC) settings on your Azure VM. NSG and firewall policies should be checked as well. These settings should not block outbound traffic.

• Azure Firewall or Custom DNS: Those who are not on Azure Firewall will have their access consider blocked hence Cognitive Services endpoints would be off limits. Also check DNS for name resolution of the domains of the Azure services from the VM.

• Finally, consider Known Service Issues: The latest piece of information regarding Azure statuses is available in the panel for current issues related to the region that was

If the comment was helpful, please don't forget to upvote.

Thank you
Suresh Estharakula 310 Reputation points Microsoft External Staff

2025-02-19T17:03:35.7733333+00:00

Hi John Benson,

I just wanted to check if you had a chance to review Geethasri.V comment. If you found it helpful, could you kindly click the “upvote” on post. This will help increase its visibility of this question for other members of the Microsoft Q&A community.

If you have any further queries, please let us know we are glad to help you.

Thank You
Geethasri.V 15 Reputation points Microsoft External Staff

2025-02-20T07:49:01.72+00:00

Hi John Benson,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted comment.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.

Share via

Using cognitive services from an azure VM doesn't transfer any traffic.

Your answer