The ultimate Fabric, Power BI, SQL, and AI community-led learning event. Save €200 with code FABCOMM.
Get registeredAsk the Fabric Databases & App Development teams anything! Live on Reddit on August 26th. Learn more.
Hello
I'm trying to run a copy activity in a Fabric pipeline to copy data from an on-prem SQL server to a Fabric SQL database via the on-premise data gateway. It's failing with the standard SQL error "A network-related or instance-specific error occurred while establishing a connection to SQL Server" and after a bit of troubleshooting I'm pretty sure the issue is that the VM hosting our gateway has port 1433 blocked outbound (but if someone could confirm that would be great). I'm basing this on the requirements for executing Fabric workloads mentioned in this document - Adjust communication settings for the on-premises data gateway | Microsoft Learn . However none of the endpoints mentioned in the doc refer to Fabric SQL database and the network ports test on the gateway itself comes up with 100% success so i wonder if the endpoints just haven't been added yet and if anyone could tell me what we'd need to allow?
Thanks
Solved! Go to Solution.
The copy activity fails because the gateway VM cannot reach Fabric SQL Database—outbound port 1433 is blocked.
Fix:
Open TCP port 1433 outbound on the gateway.
Allow access to *.database.windows.net, *.sql.azuresynapse.net, and regional Fabric SQL endpoints.
Once done, the copy activity should work.
Hi @ian2x4b523p ,
The issue you're encountering "A network-related or instance-specific error occurred while establishing a connection to SQL Server" strongly suggests that outbound port 1433 is blocked on the VM hosting your on-premises data gateway. This port is required for connecting to the Fabric SQL endpoint, and blocking it would prevent the gateway from successfully establishing a SQL connection.
For the on-premises data gateway to function correctly, it must be able to communicate outbound to Azure Relay and other supporting Azure services. The required outbound ports for this communication are:
TCP 443
TCP 5671–5672
TCP 9350–9354
These ports are essential regardless of your data destination, as they support secure, relay-based communication from your on-premises environment to Azure. It's important to note that no inbound ports need to be opened for the gateway itself.
Reference: Adjust communication settings for the on-premises data gateway | Microsoft Learn
In addition, Fabric workloads such as pipelines and dataflows require outbound connectivity to various cloud services, particularly for accessing staging storage and executing copy operations. If you're copying data directly to a Fabric SQL endpoint, outbound connectivity over port 1433 is also required. Specifically:
TCP port 443 must be open to:
*.core.windows.net – for access to Azure Data Lake
*.frontend.clouddatahub.net – for pipeline execution within Microsoft Fabric
TCP port 1433 must be open to:
*.dfs.fabric.microsoft.com
*.datawarehouse.pbidedicated.windows.net
*.datawarehouse.fabric.microsoft.com
These domains represent Fabric’s data warehouse and lakehouse services, which use the Tabular Data Stream (TDS) protocol over port 1433—standard for SQL-based connections.
Given your symptoms and the type of error message you're receiving, it is highly likely that port 1433 is being blocked by your firewall or network configuration. You should confirm that this port is open for outbound traffic from your gateway VM to the relevant Fabric SQL endpoints.
Although your network ports test on the gateway application has passed, it's worth noting that this test often verifies only the basic connectivity required for the gateway service itself (e.g., Azure Relay), not necessarily connectivity to Fabric SQL endpoints.
Therefore, to resolve the issue ensure that port 1433 is open outbound from your gateway VM.
Verify that all required gateway communication ports (443, 5671–5672, 9350–9354) are also open though your test results suggest these may already be properly configured.
If your environment cannot support domain-based allow lists (i.e., wildcard FQDNs), a broader rule to allow outbound TCP 1433 to all destinations (0.0.0.0/0) may be necessary, especially in restrictive environments.
By adjusting your firewall or proxy settings to accommodate these requirements, you should be able to eliminate the SQL connectivity error and enable successful data movement from your on-premises SQL Server to the Fabric SQL database.
Hope this helps.
Thank you.
The copy activity fails because the gateway VM cannot reach Fabric SQL Database—outbound port 1433 is blocked.
Fix:
Open TCP port 1433 outbound on the gateway.
Allow access to *.database.windows.net, *.sql.azuresynapse.net, and regional Fabric SQL endpoints.
Once done, the copy activity should work.
thank you
Hello @ian2x4b523p,
i set up an on-premises gateway and was then able to connect to my on-premises SQL Server without any problems.
I then configured the copy activity and copied data from the on-premises SQL Server to a Fabric SQL database.
Everything worked perfectly.
So your problem must definitely be something else. I hope I've been able to help you with this.
Best regards
User | Count |
---|---|
16 | |
10 | |
8 | |
4 | |
3 |
User | Count |
---|---|
53 | |
20 | |
20 | |
17 | |
12 |