Hi @pv-scrosby ,
Thank you for submitting your question on Microsoft Q&A.
Hey there! It looks like you're running into some connectivity issues between your Azure Search Service and SharePoint when using private endpoints. When your Azure Search Service is set to "public network enabled," everything works fine, but switching it to "public network disabled" interrupts the connection to SharePoint. Here are a few steps you can take and considerations to keep in mind:
Troubleshooting Steps
- Verify Private Endpoint Configuration: Ensure the private endpoint for your Azure Search Service is configured correctly. Here’s a quick way to check:
- Go to the Azure Portal > Azure Search Service > Networking > Private Endpoint Connections.
- Confirm the private endpoint status is set to "Approved".
- Check Virtual Network Settings: Both the Azure Search Service and SharePoint should be on the same Virtual Network (VNet). You can verify this by checking both services' VNet settings.
- NSG and Firewall Rules: Make sure that your Network Security Group (NSG) and any firewall rules allow traffic:
- Check the NSG rules on your private endpoint to allow inbound/outbound traffic on port 443 (HTTPS).
- Ensure that traffic is allowed between your Azure Search Service and SharePoint.
- Access via Private Endpoint: When you’re accessing the Azure Search Service through a private endpoint, certain portal functionalities might be limited. You can’t access indexes or indexers directly via the portal if the service is private. Instead, you might want to use REST API tools like Postman or Azure CLI to manage your Azure Search Service.
- Use Diagnostic Tools: Utilize the Azure Network Watcher to run troubleshooting tools to check connectivity. This tool can help identify where the connection might be failing.
- Test with a Virtual Machine: Set up a virtual machine within the same VNet as the Azure Search Service, then try connecting to the search service from there to rule any local network issues.
Follow-Up Questions
To better assist you, I would recommend gathering some additional information:
- Can you confirm if the Azure Search Service and SharePoint are indeed on the same Virtual Network?
- What specific errors or behaviors are observed in SharePoint when trying to connect to the Azure Search Service?
- Have you checked the logs in both Azure Search and SharePoint for any indication of the connection attempt status?
- Can you verify that all necessary NSG rules and firewall settings are appropriately configured to allow traffic for your setups?
Reference Documentationhttps://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint
https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
https://learn.microsoft.com/en-us/azure/search/search-indexer-howto-access-private?tabs=portal-create