How To Handle Dynamic IP Addresses Of Clients?

Dynamic client IP addresses cannot be effectively controlled through Azure Firewall rules that rely on static IP ranges. To ensure secure and predictable access, organizations should adopt identity-based authentication with Azure Active Directory, implement secure network tunneling solutions such as VPN or ExpressRoute, or leverage trusted connectivity services like Azure Bastion. These approaches provide a more reliable and scalable alternative to dynamic IP whitelisting.

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall

https://learn.microsoft.com/en-us/azure/firewall/firewall-known-issues

https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings?view=azuresql&tabs=azure-portal