Forum Discussion
Static Outbound IP for Notebook
Hey Team,
I need to load data from Crowdstrike to Lakehouse. I was leveraging Notebook along with falconpy library for this. But Crowdstrike needs to whitelist the IP from Notebook. Since notebooks have dynamic IP we are facing issue with the connection.
workarounds done:
1. Raised a support ticket with MS & they provided us the service tags. But it has 500 + tag for our region and it keeps on changing. So, its not feasible.
2. Tried leveraging pipeline with copy activity , since we have a gateway setup on a VM with static ip. But, the copy activity is super slow and the token is expiring.
3.tried managed pvt endpoints and it seems to work only with azure services and not crowdstrike
Can someone help to get this done? i tried my best for the last 2 month and still no progress for this.
Hi v-sgandrathi ,
Thank you for the optional path provided. We have an Azure VM running and tried the method you shared.But we find it difficult to manage it. As, there is no monitoring option available.
The alternative approach we found was to connect the API using Pipeline and Web connector, where we can route the request through a data gateway. It is working fine for now.
P.S: the support ticket is still on discussion . Will update here if any new possibilities are discussed.
6 Replies
Hi joyeldavis007,
Thank you for the detailed update and for the efforts you've already taken, including raising a support ticket which is absolutely the right approach.
To address the issue with dynamic IPs when using a Notebook and the FalconPy library to connect to CrowdStrike, here's a recommended workaround based on commonly adopted enterprise patterns:
Deploy your FalconPy logic in an Azure environment that supports static outbound IP addresses, such as:
Azure Function App (Premium Plan), Azure Container Instance, or Azure Virtual Machine (VM)
Configure this environment to use an Azure NAT Gateway with a static public IP, then provide that IP to CrowdStrike for whitelisting.
Once the FalconPy script pulls the data successfully, you can push the results to your Microsoft Fabric Lakehouse using supported connectors or APIs (e.g., via OneLake REST API or Azure Data Lake Gen2 integration).
Please note that, as of now, Fabric Notebooks do not support VNet integration, so routing their traffic through a NAT Gateway is not currently feasible. Hosting your extraction logic externally ensures stable connectivity while aligning with CrowdStrike’s IP whitelisting requirement.
If you're constrained from using Azure Functions or Containers, a VM-based proxy remains a valid fallback option.
We hope this helps as a complementary path while the official support ticket is under review.
If this post was helpful, please consider marking Accept as solution to assist other members in finding it more easily.
If you continue to face issues, feel free to reach out to us for further assistance!
Happy to see you here in the Microsoft Fabric Community!
Hi joyeldavis007,
May I ask if you have gotten this issue resolved?
If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.
Thakn you.
Hi v-sgandrathi ,
Thank you for the optional path provided. We have an Azure VM running and tried the method you shared.But we find it difficult to manage it. As, there is no monitoring option available.
The alternative approach we found was to connect the API using Pipeline and Web connector, where we can route the request through a data gateway. It is working fine for now.
P.S: the support ticket is still on discussion . Will update here if any new possibilities are discussed.
