Used ports and URLs for Azure Blob Storage

[StephanF]

Hello,

is there a documentation which URLs need to be contacted to use Azure Blob Storage and what ports are used? I just found a page in the User Guide refering to restore to Azure.
We want to use the Archive Tier feature but keep our firewall config as restricted as possible.

Regards,
Stephan

[Gostev]

Hello Stephan, I am pretty sure it's just HTTPS for blob storage. Thanks!

[StephanF]

Hello Gostev,

I think you are right. But opening port 443 to all destinations may not be necessary if we knew the exact URLs or IPs that are used. I can see the URL of the BLOB-Servive in the properties of the Azure storage account (xxx.blob.core.windows.net). But opening the firewall to this destination is not enough. There seem to be som more needed destinations I couldn't find yet.

Regards,
Stephan

[StephanF]

Hi all,

I just wanted to answer my question myself. Maybe somenone is interested in this in the future.

You just have to open your firewall from your Veeam server to two hosts:
1. xxx.blob.core.windows.net <-- The URL of your blob storage in Azure. This one you can get from the Azure management portal.
2. ocsp.msocsp.com <-- This one is needed for checking the SSL certificate of the Azure site.

Additionally you can set a firewall rule in the Azure storage account to just accept connections from your IP address range. This makes it even more secure.

Regards,
Stephan

[Gostev]

Thanks so much for sharing the solution, Stephan!