X   Site Message
(Message will auto close in 2 seconds)

Welcome to UtterAccess! Please ( Login   or   Register )

Custom Search
   Reply to this topicStart new topic
> SQL Azure Firewall, Any Versions    
post May 13 2018, 05:08 AM

Posts: 45
Joined: 15-September 04
From: Wiltshire

Hi all..

I have a Access 2016 FE connected to SQL Azure, all words fine. However occasionaly some of the users need to move locations so obv will have a diff IP. I can add a full IP range into the Azure firewall - whilst the password is very strong i am reluctant to do that.

Is there a way that you can add the current IP automatically into the Azure firewall via a stored procedure from the FE? Perhaps have a 2nd password that the user has to enter first, when they detect that they are at a new location?

There seems to be pros n cons for both methods, but client wants to have the firewall enabled, but they dont wanto to go through the hassle of a admin person adding in the IP for remote users all the time when they are on the road.


Go to the top of the page
post May 13 2018, 07:59 AM

UA Admin
Posts: 33,499
Joined: 20-June 02
From: Newcastle, WA

Think about it.

The purpose of the Firewall is to prevent anyone from connecting to the SQL Azure instance who is not previously approved.
Even if there WERE a way to allow someone to connect to Azure from a different, previously unauthorized, IP address, which there is not, you could, theoretically, be saying "Come on in, world, the hacking is fine." In other words, you're trusting the Access FE to be the gatekeeper now. Not a very good plan, IMO. In any event it would defeat the purpose if you opened the Firewall that way, would it not? Why bother? Open up the range, as you mention and rely on your own credentialing protocol.
This post has been edited by GroverParkGeorge: May 13 2018, 09:05 AM

My Real Name Is George. Grover Park Consulting is where I do business.
How to Ask a Good Question
Beginning SQL Server
Visit My Blog on Facebook
Go to the top of the page
post May 17 2018, 09:31 AM

Posts: 45
Joined: 15-September 04
From: Wiltshire

Hi George

Many thanks for the prompt reply and sorry for the delay in replying...

Yes i definitely agree with you when you lay it out like that, I was just wondering if there was a best of both worlds situation, I will as you suggest open up the IP range.

Have a great day and thanks again. smile.gif

All the best

Go to the top of the page

Custom Search
RSSSearch   Top   Lo-Fi    22nd September 2018 - 03:57 PM