Private Endpoints - Disable Public Access

[mgfeal]

Hi,

We are developing our new software in Azure and we are using some CosmosDB, Key Vaults...

By default, all of them are published to internet. We use the default URI (https://testxxxxx.mongo.cosmos.azure.com:443/) and in Networking the Public Network Access is opened to "All networks".

For security reasons we want to change it. We don't want that our services are published to internet (now you can telnet to testdwh.mongo.cosmos.azure.com using 443 and 10255 ports.

So we disabled Public Access for one CosmosDB account:

And then we enabled the Private Access adding a Private Endpoint:

But... after these changes, we don't know why but we still connect to testxxxxxx.mongo.cosmos.azure.com using 443 and 10255 from internet.

How can we block this connections from internet?

Thanks!

[#2 · Accepted solution]

Have you employed the network security group and blocked inbound traffic?
Also, have you reviewed this article by chance?
https://learn.microsoft.com/en-us/azure/virtual-network/tutorial-restrict-network-access-to-resource...

[#3]

@mgfeal 

How about NSG? Please verify the rules under NSG