Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
702 questions
requests from synapse pipelines blocked by firewall policy of cosmDB.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 98%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
ANKIT GHENGE
40
Reputation points
hello team, the requests are getting originated from synapse analytics pipelines to nosql coosmosDB. the requests are getting blocked by firewall settings of cosmosdb as the request IPs are different one for every run and requesting through public IP
points noted: - there is no any vnets configured over synapse analytics and cosmosdb.
need help to resolve it
{count} votes
-
ANKIT GHENGE 40 Reputation points
2024-12-04T16:34:07.02+00:00 is the networking logic of whitelisting 0.0.0.0 IP effective in cosmosDB firewall settings mentioned in below MS documentation? plz give a brief about the validations and setup required for the same
https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall -
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
Oury Ba-MSFT 19,831 Reputation points Microsoft Employee2024-12-04T22:31:46.2066667+00:00 @ANKIT GHENGE Thank you for reaching out.
You can use private endpoints and configure virtual network for both Azure synapse and Azure Cosmos DB.
You can control network access to the data in the transactional and analytical stores independently. Network isolation is done using separate managed private endpoints for each store, within managed virtual networks in Azure Synapse workspaces.
To learn more, see What is Azure Cosmos DB analytical store? | Microsoft Learn
Configure private endpoints for analytical store article.
Regards,
Oury
-
ANKIT GHENGE 40 Reputation points
2024-12-05T13:51:04.2466667+00:00 hello oury, i got the other environments using below configurations for data sync between synapse analytics and cosmodb because every pipeline run sends request from different IP and some reports generation requests are sent on another linked cosmosdb thorugh public internet so setup of Vnet can might cause blocking for web requests for reports generation.
plz let me know how the below logic will be effective for this?
https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall -
Oury Ba-MSFT 19,831 Reputation points Microsoft Employee
2024-12-13T23:21:13.6133333+00:00 Sorry for the delay in my response.
you can use analytical store private endpoints for Azure CosmosDB. This allows you to restrict network access to your CosmosDB analytical store through a managed private endpoint associated with your Azure Synapse workspace.
https://learn.microsoft.com/en-us/azure/cosmos-db/analytical-store-private-endpoints
Sign in to comment
Sign in to answer