Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Ask the Fabric Databases & App Development teams anything! Live on Reddit on August 26th. Learn more.

Reply
ian2x4b523p
New Member

Copy activity from on-prem to Fabric SQL Database

Hello

I'm trying to run a copy activity in a Fabric pipeline to copy data from an on-prem SQL server to a Fabric SQL database via the on-premise data gateway. It's failing with the standard SQL error "A network-related or instance-specific error occurred while establishing a connection to SQL Server" and after a bit of troubleshooting I'm pretty sure the issue is that the VM hosting our gateway has port 1433 blocked outbound (but if someone could confirm that would be great). I'm basing this on the requirements for executing Fabric workloads mentioned in this document - Adjust communication settings for the on-premises data gateway | Microsoft Learn . However none of the endpoints mentioned in the doc refer to Fabric SQL database and the network ports test on the gateway itself comes up with 100% success so i wonder if the endpoints just haven't been added yet and if anyone could tell me what we'd need to allow?

Thanks

 

1 ACCEPTED SOLUTION
Shahid12523
Kudo Kingpin
Kudo Kingpin

The copy activity fails because the gateway VM cannot reach Fabric SQL Database—outbound port 1433 is blocked.

 

Fix:

Open TCP port 1433 outbound on the gateway.

Allow access to *.database.windows.net, *.sql.azuresynapse.net, and regional Fabric SQL endpoints.

Once done, the copy activity should work.

Shahed Shaikh

View solution in original post

4 REPLIES 4
v-echaithra
Community Support
Community Support

Hi @ian2x4b523p ,

The issue you're encountering "A network-related or instance-specific error occurred while establishing a connection to SQL Server" strongly suggests that outbound port 1433 is blocked on the VM hosting your on-premises data gateway. This port is required for connecting to the Fabric SQL endpoint, and blocking it would prevent the gateway from successfully establishing a SQL connection.

For the on-premises data gateway to function correctly, it must be able to communicate outbound to Azure Relay and other supporting Azure services. The required outbound ports for this communication are:
TCP 443
TCP 5671–5672
TCP 9350–9354

These ports are essential regardless of your data destination, as they support secure, relay-based communication from your on-premises environment to Azure. It's important to note that no inbound ports need to be opened for the gateway itself.
Reference: Adjust communication settings for the on-premises data gateway | Microsoft Learn
In addition, Fabric workloads such as pipelines and dataflows require outbound connectivity to various cloud services, particularly for accessing staging storage and executing copy operations. If you're copying data directly to a Fabric SQL endpoint, outbound connectivity over port 1433 is also required. Specifically:

TCP port 443 must be open to:
*.core.windows.net – for access to Azure Data Lake
*.frontend.clouddatahub.net – for pipeline execution within Microsoft Fabric

TCP port 1433 must be open to:

*.dfs.fabric.microsoft.com

*.datawarehouse.pbidedicated.windows.net

*.datawarehouse.fabric.microsoft.com

These domains represent Fabric’s data warehouse and lakehouse services, which use the Tabular Data Stream (TDS) protocol over port 1433—standard for SQL-based connections.

Given your symptoms and the type of error message you're receiving, it is highly likely that port 1433 is being blocked by your firewall or network configuration. You should confirm that this port is open for outbound traffic from your gateway VM to the relevant Fabric SQL endpoints.

Although your network ports test on the gateway application has passed, it's worth noting that this test often verifies only the basic connectivity required for the gateway service itself (e.g., Azure Relay), not necessarily connectivity to Fabric SQL endpoints.

Therefore, to resolve the issue ensure that port 1433 is open outbound from your gateway VM.

Verify that all required gateway communication ports (443, 5671–5672, 9350–9354) are also open though your test results suggest these may already be properly configured.

If your environment cannot support domain-based allow lists (i.e., wildcard FQDNs), a broader rule to allow outbound TCP 1433 to all destinations (0.0.0.0/0) may be necessary, especially in restrictive environments.

By adjusting your firewall or proxy settings to accommodate these requirements, you should be able to eliminate the SQL connectivity error and enable successful data movement from your on-premises SQL Server to the Fabric SQL database.

Hope this helps.
Thank you.

Shahid12523
Kudo Kingpin
Kudo Kingpin

The copy activity fails because the gateway VM cannot reach Fabric SQL Database—outbound port 1433 is blocked.

 

Fix:

Open TCP port 1433 outbound on the gateway.

Allow access to *.database.windows.net, *.sql.azuresynapse.net, and regional Fabric SQL endpoints.

Once done, the copy activity should work.

Shahed Shaikh

thank you

spaceman127
Helper II
Helper II

Hello @ian2x4b523p,

 

i set up an on-premises gateway and was then able to connect to my on-premises SQL Server without any problems.

I then configured the copy activity and copied data from the on-premises SQL Server to a Fabric SQL database.

Everything worked perfectly.

 

So your problem must definitely be something else. I hope I've been able to help you with this.

 

Best regards

Helpful resources

Announcements
Fabric July 2025 Monthly Update Carousel

Fabric Monthly Update - July 2025

Check out the July 2025 Fabric update to learn about new features.

August 2025 community update carousel

Fabric Community Update - August 2025

Find out what's new and trending in the Fabric community.