Protect your Azure SQL Database with Firewall Rules
Hi All,
In this Blog Article, i want to talk about how to protect your Azure SQL Databases with Firewall Rules at Server or Database level.
Azure SQL Database and Azure Synapse IP firewall rules
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_00.jpg)
The Server Level you can find on your Server Object
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_01.jpg)
You can also find this when query the master Database
--Database: master
SELECT * FROM sys.firewall_rules
SELECT * FROM sys.firewall_rules
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_02.jpg)
At the Database level use this
sp_set_firewall_rule (Azure SQL Database)
--Database: db_home_icewolf
Select * FROM sys.database_firewall_rules
Select * FROM sys.database_firewall_rules
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_03.jpg)
To allow Azure Services add the following
-- Enable Azure connections.
EXECUTE sp_set_database_firewall_rule N'Allow Azure', '0.0.0.0', '0.0.0.0';
EXECUTE sp_set_database_firewall_rule N'Allow Azure', '0.0.0.0', '0.0.0.0';
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_04.jpg)
to add a custom IP or IP Range use these
-- Create database-level firewall setting for only IP 0.0.0.4
EXECUTE sp_set_database_firewall_rule N'Example DB Setting IP', '95.143.60.18', '95.143.60.18';
-- Update database-level firewall setting to create a range of allowed IP addresses
EXECUTE sp_set_database_firewall_rule N'Example DB Setting IP Range', '95.143.60.17', '95.143.60.22';
EXECUTE sp_set_database_firewall_rule N'Example DB Setting IP', '95.143.60.18', '95.143.60.18';
-- Update database-level firewall setting to create a range of allowed IP addresses
EXECUTE sp_set_database_firewall_rule N'Example DB Setting IP Range', '95.143.60.17', '95.143.60.22';
![](https://icewolffile.blob.core.windows.net/$web/202203/AzureSQLDB_Network_05.jpg)
Regards
Andres Bohren
![](https://icewolffile.blob.core.windows.net/$web/logos/azure_logo.png)