Check Access to Azure Services from Azure VM

Question

How do I check to see if access to Azure services, such as a storage containers or a storage queue, is allowed or blocked from a VM on Azure?

I need to make sure that an app running in a VM is allowed access to a particular service i.e. storage queue and not be blocked by a firewall rule on the VM or the VNET. How do I make sure this access is allowed?

P.S. The app I'm running in the VM is not creating messages in my storage queue but doesn't throw any errors either. The app is an ASP.NET MVC app running on .NET Framework 4.6.1. Because the app is a bit old, I had to use the WindowsAzure.Storage NuGet package to make my calls to my Storage Queue. When I run the app locally on my dev machine, everything is working fine but when I run it on the production VM, nothing happens, including no errors but the app simply doesn't create new messages in my storage queue. I'd appreciate some help/pointers on how to resolve this issue.

Answer 1

@Sam Uresin
Azure storage for blobs and queues uses standard HTTP or HTTPs protocols. You can try simply using something like Test-NetConnection in PowerShell to see if it works:
Test-NetConnection -ComputerName "mystorageaccount.blob.core.windows.net" -Port 443 -InformationLevel "Detailed"

You can also test in the Azure portal search for Network Watcher and then selection Connection troubleshoot on the side.

If you find that your connectivity is blocked you will need to check your Network Security Groups for the VM, Effective security rules would be helpful. You also will need to check the storage account firewall.

Hope this helps. If you are still unable to resolve this issue please let us know and we can work with you closer.

-------------------------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.