Networking options Fabric

[emilisalas]

Hi, we are doing a proof of concept with Fabric. We have created a Lahehouse with one database. This database is published on Internet. Is there a way to protect by IP (to connect only from IPs provided). In Azure Synapse analytics you can do that in networking section.

Thanks

[v-kpoloju-msft]

Hi @emilisalas,

Thank you for reaching out to the Microsoft Fabric Community Forum.

After reviewing the issue of Networking options in Fabric, here are few steps to resolve the issue.

Please go through the following steps to resolve the issue:

• Please ensure that IP firewall rules are properly configured in Azure Synapse Analytics. To do this, navigate to the Networking section in the Azure portal and specify the permitted IP addresses.
• Ensure your Network Security Groups for Azure Synapse workspace allow traffic from the specified IP addresses and have the correct inbound and outbound rules configured.
• Make sure that public network access is disabled if you want to restrict access to specific IP addresses. You can manage this setting in the Networking section of the Azure portal.
• Test connectivity from the allowed IP addresses using SQL Server Management Studio. Ensure there are no connectivity issues or firewall blocks.
• Review the logs in Azure Monitor and Azure Security Center for security alerts or connectivity issues to identify potential IP firewall rule or network configuration problems.
• Please verify that any recent changes to your IP firewall rules have been saved and applied correctly. Note that it may take a few minutes for these changes to fully propagate.

Please go through the below documentation link for better understanding:

Configure IP firewall rules - Azure Synapse Analytics | Microsoft Learn

If you have any further queries, please feel free to reach out to us we will guide you accordingly. If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thank you.

[emilisalas]

This configuration is related to Azure Synapse analytics. I was asking if in Fabric this configuration exists too.

Thanks

[v-kpoloju-msft]

Hi @emilisalas,

Thank you for reaching out to us on the Fabric Community Forum. We sincerely apologize for the inconvenience caused.

Yes, in Microsoft Fabric, you can restrict access to a database by configuring IP-based firewall rules, similar to how you would in Azure Synapse Analytics. Here’s how you can achieve that:

• First navigate to the Fabric portal and go to the workspace where your Lakehouse and database are located then in Microsoft Fabric, security and access controls are typically managed at the workspace or database level and check the Lakehouse settings or associated SQL Endpoint settings in your workspace.
• If you are using a SQL Endpoint or related services, go to the Networking section in the settings and configure IP firewall rules to restrict access to specific IP ranges then add the allowed IP addresses or CIDR ranges you want to permit access from.
• At last to further secure the Lakehouse database, consider enabling Private Link or Private Endpoints to restrict access over a private network rather than the public internet This ensures that only approved IPs within your private network can connect.

I believe the steps provided above will help in understanding and resolving the issue. If you still encounter the problem after implementing them, please reach out to us with the relevant error details. This will assist us in investigating the issue more effectively.

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thank you.

[v-kpoloju-msft]

Hi @emilisalas,

May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.

Thank you.

[v-kpoloju-msft]

Hi @emilisalas,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.

Thank you.

[v-kpoloju-msft]

Hi @emilisalas,

I hope this information is helpful. Please let me know if you have any further questions or if you'd like to discuss this further. If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.

Thank you.