How to deny port 1433 access to SQL Server VM while allowing SQL query from Integrated Web App

Question

I have integrated Azure WebApp to SQL Server VM so that these can communicate via Vnet instead of public internet.

I have denied all TCP port 80 for incomings for security reason. I see that http posts reach successfully from WebApp to VM.

However when I deny all TCP port 1433 for comings, SQL queries stop reaching from Web App to SQL Server VM. I was expecting that integrated VNet would handle this. SQL Server VM have SQL connectivity settings as private(within virtual network) If I keep 1433 open I can access from my desktop Excel to SQL Server DB, which is security risk in this case.

How to solve?

4c74356b41 · Accepted Answer · 2017-09-14 18:36:53Z

1

Just close 1433 on the network security group to the traffic originating from the internet. That will block external traffic to 1433, but will leave internal intact.

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-nsg

answered Sep 14, 2017 at 18:36

4c74356b41

71.4k7 gold badges118 silver badges155 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Kenny_I Over a year ago

How to define source as internet? Priority: 1010, Name :SQLServer, Port 1433, Protocol: TCP, Source: Any, Destination: Any, Action: Deny,

4c74356b41 Over a year ago

learn.microsoft.com/en-us/azure/virtual-network/…

4c74356b41 Over a year ago

literally what you said, source - internet

Collectives™ on Stack Overflow

How to deny port 1433 access to SQL Server VM while allowing SQL query from Integrated Web App

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related