Before You Begin
Create a network security group
You open a port, or create an endpoint, to a virtual machine VM in Azure by creating a network filter on a subnet or a VM network interface. You place these filters, which control both inbound and outbound traffic, on a network security group attached to the resource that receives the traffic. The example in this article demonstrates how to create a network filter that uses the standard TCP port 80 it's assumed you've already started the appropriate services and opened any OS firewall rules on the VM. After you've created a VM that's configured to serve web requests on the standard TCP port 80, you can:.
Sign in to Azure
This is an option that will enable you to limit how much your service is exposed to attacks from the public network. The Firewall Network protects the IPs that are associated with a machine. You must therefore configure each IP separately; it is not possible to configure the server as a whole. You can enable and configure it manually from the Control Panel in the IP section, by clicking on the gear icon to the right of the relevant IPv4. The firewall is enabled automatically upon each DDoS attack, and cannot be disabled before the attack ends. This is why it is important to keep the firewall rules up to date. As a default setting you do not have any configured rules, so all connections can be set up. If you do have any, remember to check your firewall rules regularly, even if you disable it.
Applies to: SQL Server all supported versions. Firewall systems help prevent unauthorized access to computer resources. There are many firewall systems available. For information specific to your system, see the firewall documentation. The default instance of the Database Engine uses port , but that can be changed.