This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 46%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBV%3C/text%3E%3C/svg%3E)
Hi there,
I am trying to block my WebServer from accessing a SQL instance hosted on my DBServer.
I have included a topology of my network to possibly make troubleshooting easier.
I have added an incoming rule to my NSG that is associated with my DBServers network interface
I have even tried creating an NSG on the DBServer subnet to block all SQL access to the entire subnet on port 1433.
For some reason, i can still access my SQL server through SQL management studio on my webserver.
I can easily block access from the Windows firewall, but thats not really the point.
Really not sure what i am doing wrong?
Hi,
Is your subnet has service endpoints enabled ?
Also can you ping the db FQDN from the web server and check if it is resolving to the same DB which you are referring to ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 15%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
If you go to your SQL Server -> Security -> Firewalls and virtual networks, do you have the Allow Azure services and resources to access this server set to On?