{"action":"created","issue":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/20867","repository_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs","labels_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/20867/labels{/name}","comments_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/20867/comments","events_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/20867/events","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/20867","id":391763141,"node_id":"MDU6SXNzdWUzOTE3NjMxNDE=","number":20867,"title":"Is it possible that there are some dependecies missing?","user":{"login":"mapoitras","id":307074,"node_id":"MDQ6VXNlcjMwNzA3NA==","avatar_url":"https://avatars1.githubusercontent.com/u/307074?v=4","gravatar_id":"","url":"https://api.github.com/users/mapoitras","html_url":"https://github.com/mapoitras","followers_url":"https://api.github.com/users/mapoitras/followers","following_url":"https://api.github.com/users/mapoitras/following{/other_user}","gists_url":"https://api.github.com/users/mapoitras/gists{/gist_id}","starred_url":"https://api.github.com/users/mapoitras/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mapoitras/subscriptions","organizations_url":"https://api.github.com/users/mapoitras/orgs","repos_url":"https://api.github.com/users/mapoitras/repos","events_url":"https://api.github.com/users/mapoitras/events{/privacy}","received_events_url":"https://api.github.com/users/mapoitras/received_events","type":"User","site_admin":false},"labels":[{"id":646533977,"node_id":"MDU6TGFiZWw2NDY1MzM5Nzc=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/app-service/svc","name":"app-service/svc","color":"90ee90","default":false},{"id":836703193,"node_id":"MDU6TGFiZWw4MzY3MDMxOTM=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/cxp","name":"cxp","color":"bf1394","default":false},{"id":880598256,"node_id":"MDU6TGFiZWw4ODA1OTgyNTY=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/product-issue","name":"product-issue","color":"2fe09f","default":false},{"id":836702742,"node_id":"MDU6TGFiZWw4MzY3MDI3NDI=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/triaged","name":"triaged","color":"0e8a16","default":false}],"state":"open","locked":false,"assignee":{"login":"Grace-MacJones-MSFT","id":42247081,"node_id":"MDQ6VXNlcjQyMjQ3MDgx","avatar_url":"https://avatars3.githubusercontent.com/u/42247081?v=4","gravatar_id":"","url":"https://api.github.com/users/Grace-MacJones-MSFT","html_url":"https://github.com/Grace-MacJones-MSFT","followers_url":"https://api.github.com/users/Grace-MacJones-MSFT/followers","following_url":"https://api.github.com/users/Grace-MacJones-MSFT/following{/other_user}","gists_url":"https://api.github.com/users/Grace-MacJones-MSFT/gists{/gist_id}","starred_url":"https://api.github.com/users/Grace-MacJones-MSFT/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Grace-MacJones-MSFT/subscriptions","organizations_url":"https://api.github.com/users/Grace-MacJones-MSFT/orgs","repos_url":"https://api.github.com/users/Grace-MacJones-MSFT/repos","events_url":"https://api.github.com/users/Grace-MacJones-MSFT/events{/privacy}","received_events_url":"https://api.github.com/users/Grace-MacJones-MSFT/received_events","type":"User","site_admin":false},"assignees":[{"login":"Grace-MacJones-MSFT","id":42247081,"node_id":"MDQ6VXNlcjQyMjQ3MDgx","avatar_url":"https://avatars3.githubusercontent.com/u/42247081?v=4","gravatar_id":"","url":"https://api.github.com/users/Grace-MacJones-MSFT","html_url":"https://github.com/Grace-MacJones-MSFT","followers_url":"https://api.github.com/users/Grace-MacJones-MSFT/followers","following_url":"https://api.github.com/users/Grace-MacJones-MSFT/following{/other_user}","gists_url":"https://api.github.com/users/Grace-MacJones-MSFT/gists{/gist_id}","starred_url":"https://api.github.com/users/Grace-MacJones-MSFT/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Grace-MacJones-MSFT/subscriptions","organizations_url":"https://api.github.com/users/Grace-MacJones-MSFT/orgs","repos_url":"https://api.github.com/users/Grace-MacJones-MSFT/repos","events_url":"https://api.github.com/users/Grace-MacJones-MSFT/events{/privacy}","received_events_url":"https://api.github.com/users/Grace-MacJones-MSFT/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2018-12-17T15:28:29Z","updated_at":"2018-12-18T14:15:53Z","closed_at":null,"author_association":"NONE","body":"I create an external ASE and firewall and follow the instructions above to configure everything.  My ASE is healthy and running however I get an error everytime I try to create a Web App.\n\nSteps to Reproduce.  I use instructions from this Page:  https://docs.microsoft.com/en-us/azure/app-service/environment/firewall-integration\n\n1.\t Create External ASE.\na.     Take note of all the App Service Management IP Addresses\n2.\tCreate Firewall\n3.\tCreate Firewall Rules\na.\tAdd FQDN Tags and select the App Service Environment FQDN Tag\nb.\tAdd Application dependency FQDNs to the Azure Firewall  for dependencies listed under “FQDN HTTP/HTTPS dependencies” identified on this page.\n4.\tCreate Route Table\na.\tAdd management addresses from App Service Environment management addresses with a next hop of Internet. \nb.\tAdd routes for the \"Management IP Addresses found on the ASE Health Page with a next hop of Internet.\nc.\tAdd routes for “IP address dependencies” identified on this page. \nd.\tAdd a route to the route table for 0.0.0.0/0 with the next hop being your Azure Firewall.\n 5.\tGo to ASE Subnet and assign route table we just created to the ASE Subnet.\n6.\tCreate Service Endpoints for the ASE subnet to Azure SQL, Key Vault and Azure Storage.  \n7.\tGo to ASE VNET and Peer Firewall Vnet\n8.\tGo to Firewall Vnet and Peer ASE Vnet\n9.\tNow try to create a web app and App Service Plan in new ASE.  It will fail.\n\n\n---\n#### Document Details\n\n⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*\n\n* ID: 29246f12-744e-08a1-c222-b0eae866b401\n* Version Independent ID: 6e925f96-dc31-d400-2681-2e387b40ed74\n* Content: [Locking down App Service Environment outbound traffic - Azure](https://docs.microsoft.com/en-us/azure/app-service/environment/firewall-integration)\n* Content Source: [articles/app-service/environment/firewall-integration.md](https://github.com/Microsoft/azure-docs/blob/master/articles/app-service/environment/firewall-integration.md)\n* Service: **app-service**\n* GitHub Login: @ccompy\n* Microsoft Alias: **ccompy**"},"comment":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/comments/448234764","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/20867#issuecomment-448234764","issue_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/20867","id":448234764,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0ODIzNDc2NA==","user":{"login":"mapoitras","id":307074,"node_id":"MDQ6VXNlcjMwNzA3NA==","avatar_url":"https://avatars1.githubusercontent.com/u/307074?v=4","gravatar_id":"","url":"https://api.github.com/users/mapoitras","html_url":"https://github.com/mapoitras","followers_url":"https://api.github.com/users/mapoitras/followers","following_url":"https://api.github.com/users/mapoitras/following{/other_user}","gists_url":"https://api.github.com/users/mapoitras/gists{/gist_id}","starred_url":"https://api.github.com/users/mapoitras/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mapoitras/subscriptions","organizations_url":"https://api.github.com/users/mapoitras/orgs","repos_url":"https://api.github.com/users/mapoitras/repos","events_url":"https://api.github.com/users/mapoitras/events{/privacy}","received_events_url":"https://api.github.com/users/mapoitras/received_events","type":"User","site_admin":false},"created_at":"2018-12-18T14:15:53Z","updated_at":"2018-12-18T14:15:53Z","author_association":"NONE","body":"Its just a Windows app.  I think we figured out how to get past the error.  We  added  a firewall network rule to allow the ASE web app subnet outbound to any on any port.   Is there a way to lock this down a bit more than allowing all?  \n\nNow we can create the web app.    What we have done is create another vnet with a VM and connected it to the hub/firewall vnet.  We are trying to configure the environment so access to web app is only accessible from this VM subnet.\n\nAlso not clear what we are supposed to do with the wildcard dependencies.  It would be usefull if document was more prescriptive in what we need to do.  I'm not a network guy so this has been difficult.  \nOur goal is to have an External ASE environment behind a firewall where some web apps are accessible externally, and some are accessible only from specific Vnets.   Essentially, we want to\n-Be Able to restrict inbound access to the web apps\n-Allow multiple domain for the web apps\nThanks or the help."}}
{"actor":{"display_login":"mapoitras"}}