Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
By default, you can access Event Grid namespaces and entities from the internet as long as the request has valid authentication and authorization. By using the IP firewall, you can restrict access to specified IP addresses or address ranges in CIDR (Classless Inter-Domain Routing) notation. Only clients in an allowed range can connect to Azure Event Grid to publish or pull events. Other clients are rejected and receive a 403 (Forbidden) response. For more information about network security features supported by Event Grid, see Network security for Event Grid.
This article describes how to configure IP firewall settings for an Event Grid namespace. For complete steps for creating a namespace, see Create and manage namespaces.
During preview, an IPv6 dual-stack namespace supports IPv4 and IPv6 firewall rules. Configure IPv4 and IPv6 address ranges independently. An IPv4 rule doesn't authorize an IPv6 client address, and an IPv6 rule doesn't authorize an IPv4 client address. For more information, see Configure IPv6 dual-stack support (preview).
Create a namespace with IP firewall settings
On the Networking page, if you want to allow clients to connect to the namespace endpoint via a public IP address, select Public access for Connectivity method if it's not already selected.
To restrict access from specific IP addresses, specify an IPv4 or IPv6 address or CIDR range in Address range. Add a rule for each client protocol that you intend to permit.
Update a namespace with IP firewall settings
Sign in to the Azure portal.
In the search box, enter Event Grid Namespaces and select Event Grid Namespaces from the results.
Select your Event Grid namespace in the list to open the Event Grid Namespace page for your namespace.
On the Event Grid Namespace page, select Networking on the left menu.
In Address range, specify each IPv4 or IPv6 address or CIDR range that you want to allow. Configure IPv4 and IPv6 rules independently.
