|
1 | | ---- |
2 | | -title: Troubleshoot Virtual Network Issues |
3 | | -description: Learn how to troubleshoot common scenarios for Virtual Network in Microsoft Power Platform. |
4 | | -author: faix |
5 | | -ms.component: pa-admin |
6 | | -ms.topic: concept-article |
7 | | -ms.date: 09/15/2025 |
8 | | -ms.author: osfaixat |
9 | | -ms.reviewer: sericks |
10 | | -search.audienceType: |
11 | | - - admin |
12 | | -contributors: |
13 | | -ms.custom: sap:Power Platform Administration |
14 | | ---- |
15 | | - |
16 | | -# Troubleshoot Virtual Network issues |
17 | | - |
18 | | -This article provides guidance on troubleshooting common scenarios for [Virtual Network](/power-platform/admin/vnet-support-overview) in Power Platform. It focuses on the use of a PowerShell module to help you identify and resolve issues related to Virtual Network configurations. |
19 | | - |
20 | | -## Diagnostics PowerShell Module |
21 | | - |
22 | | -The Diagnostics PowerShell Module is a tool designed to help you diagnose and troubleshoot issues related to Virtual Network configurations in Power Platform. The module can be used to check the connectivity between your Power Platform environment and your Virtual Network, and to identify any misconfigurations that might be causing issues. It's available from the PowerShell Gallery and from our GitHub repository: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies) |
23 | | - |
24 | | -### Installing the module |
25 | | - |
26 | | -To install the Diagnostics PowerShell Module, you can use the following command in PowerShell: |
27 | | - |
28 | | -```powershell |
29 | | -Install-Module -Name Microsoft.PowerPlatform.EnterprisePolicies |
30 | | -``` |
31 | | - |
32 | | -### Running the functions included in the module |
33 | | - |
34 | | -Once the module is installed, you can import it into your PowerShell session using the following command: |
35 | | - |
36 | | -```powershell |
37 | | -Import-Module Microsoft.PowerPlatform.EnterprisePolicies |
38 | | -``` |
39 | | - |
40 | | -The module includes several functions that can be used to diagnose and troubleshoot issues related to Virtual Network configurations. Some of the key functions include: |
41 | | - |
42 | | -- [Get-EnvironmentRegion](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Get-EnvironmentRegion.md): Retrieves the region of the specified Power Platform environment. |
43 | | -- [Get-EnvironmentUsage](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Get-EnvironmentUsage.md): Provides information about the usage of the specified Power Platform environment. |
44 | | -- [Test-DnsResolution](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-DnsResolution.md): Tests the DNS resolution for the specified domain name. |
45 | | -- [Test-NetworkConnectivity](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-NetworkConnectivity.md): Tests the network connectivity between the Power Platform environment and the specified Virtual Network. |
46 | | - |
47 | | -### Report issues with the diagnostic module |
48 | | - |
49 | | - |
50 | | -If you encounter issues while running the diagnostic module, report them through the GitHub repository where the module is hosted. The repository is available at: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies). |
51 | | - |
52 | | -To report an issue, go to the Issues section of the repository and create a [new issue](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/issues/new). Provide detailed information about the problem you're facing, including any error messages or logs that might help in diagnosing the issue. The more information you provide, the easier it is for us to assist you. Don't include any sensitive information in your report. |
53 | | - |
54 | | -## How to troubleshoot common scenarios |
55 | | - |
56 | | -### Misconfiguration of regions |
57 | | - |
58 | | -If you have verified that everything is correctly configured but you're still experiencing issues, you can use the `Get-EnvironmentRegion` function from the Diagnostics PowerShell Module to check if the region of your Power Platform environment is the same as the regions where you have been configuring your Virtual Network. You can run the following command: |
59 | | - |
60 | | -```powershell |
61 | | -Get-EnvironmentRegion -EnvironmentId "00000000-0000-0000-0000-000000000000" |
62 | | -``` |
63 | | - |
64 | | -Your environment belongs to a specific PowerPlatform region. However, a PowerPlatform region can span multiple Azure regions. You need to ensure that your Virtual Network is configured in both of the Azure regions that correspond to your PowerPlatform region. Your environment can be located in either of the two Azure regions, and it can also automatically fail over between them. Therefore, to ensure high availability and connectivity, you should configure your Virtual Network in both Azure regions associated with your PowerPlatform region. You can find the mapping of the PowerPlatform regions to Azure regions that are support for the Virtual Network functionality at [Power Platform regions](/power-platform/admin/vnet-support-overview#supported-regions). |
65 | | - |
66 | | -### Hostname not found |
67 | | - |
68 | | -If you're experiencing issues with hostname resolution, you can use the `Test-DnsResolution` function from the Diagnostics PowerShell Module to check if the hostname is being resolved correctly. You can run the following command: |
69 | | - |
70 | | -```powershell |
71 | | -Test-DnsResolution -EnvironmentId "00000000-0000-0000-0000-000000000000" -HostName "microsoft.com" |
72 | | -``` |
73 | | - |
74 | | -This command tests the DNS resolution for the specified hostname in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to resolve the hostname using the DNS server that is configured for your Virtual Network. If the hostname isn't being resolved correctly, you might need to check your DNS settings and ensure that the hostname is correctly configured. |
75 | | - |
76 | | -> [!IMPORTANT] |
77 | | -> If you notice that your DNS setup is incorrect and need to update the DNS server settings for your Virtual Network, see [Can I update the DNS address of my Virtual Network after it's delegated to "Microsoft.PowerPlatform/enterprisePolicies"?](/power-platform/admin/vnet-support-overview#can-i-update-the-dns-address-of-my-virtual-network-after-its-delegated-to-microsoftpowerplatformenterprisepolicies) |
78 | | -
|
79 | | -### Unable to connect to the resource |
80 | | - |
81 | | -If you're experiencing issues with connectivity to a resource, you can use the `Test-NetworkConnectivity` function from the Diagnostics PowerShell Module to check if there's connectivity. You can run the following command: |
82 | | - |
83 | | -```powershell |
84 | | -Test-NetworkConnectivity -EnvironmentId "00000000-0000-0000-0000-000000000000" -Destination "unknowndb.database.windows.net" -Port 1433 |
85 | | -``` |
86 | | - |
87 | | -This command attempts to establish a TCP connection to the specified destination and port in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to connect to the specified destination using the network configuration that is set up for your Virtual Network. If the connection fails, you might need to check your network settings and ensure that the destination is reachable from your Virtual Network. If the connection is successful, it indicates that there's network connectivity between the Power Platform environment and the specified resource. |
88 | | - |
89 | | -> [!NOTE] |
90 | | -> This command only tests if a TCP connection can be established to the specified destination and port. It doesn't test if the resource is actually available or if there are any application-level issues that might be preventing access to the resource. |
91 | | -> Furthermore, some firewalls might be allowing TCP connections to be established but blocking actual traffic to the resource (that is, HTTPS). Therefore, even if the command indicates that there's network connectivity, it doesn't guarantee that the resource is fully accessible. |
92 | | -
|
93 | | -### Connectivity is successful, but the application is still not working |
94 | | - |
95 | | -If the connectivity tests are successful, but you're still experiencing issues with your application, you might need to check the application-level settings and configurations. Things that you can check include: |
96 | | - |
97 | | -- Validate in your firewall that the delegated subnet is allowed to access the resource. |
98 | | -- Validate that the certificate presented by the resource is publicly trusted. |
99 | | -- Ensure that there are no authentication or authorization issues that might be preventing access to the resource. |
100 | | - |
101 | | -If our existing tools aren't sufficient to diagnose the issue further. You might want to create a subnet without delegation in your Virtual Network and deploy a virtual machine in that subnet. You can then use the virtual machine to perform additional diagnostics and troubleshooting steps, such as checking network traffic, analyzing logs, and testing application-level connectivity. |
| 1 | +--- |
| 2 | +title: Troubleshoot Virtual Network Issues |
| 3 | +description: Learn how to troubleshoot common scenarios for Virtual Network in Microsoft Power Platform. |
| 4 | +author: faix |
| 5 | +ms.component: pa-admin |
| 6 | +ms.topic: concept-article |
| 7 | +ms.date: 09/15/2025 |
| 8 | +ms.author: osfaixat |
| 9 | +ms.reviewer: sericks |
| 10 | +search.audienceType: |
| 11 | + - admin |
| 12 | +contributors: |
| 13 | +ms.custom: sap:Environment - Administration |
| 14 | +ms.topic: troubleshooting-general |
| 15 | +--- |
| 16 | + |
| 17 | +# Troubleshoot Virtual Network issues |
| 18 | + |
| 19 | +This article provides guidance on troubleshooting common scenarios for [Virtual Network](/power-platform/admin/vnet-support-overview) in Power Platform. It focuses on the use of a PowerShell module to help you identify and resolve issues related to Virtual Network configurations. |
| 20 | + |
| 21 | +## Diagnostics PowerShell Module |
| 22 | + |
| 23 | +The Diagnostics PowerShell Module is a tool designed to help you diagnose and troubleshoot issues related to Virtual Network configurations in Power Platform. The module can be used to check the connectivity between your Power Platform environment and your Virtual Network, and to identify any misconfigurations that might be causing issues. It's available from the PowerShell Gallery and from our GitHub repository: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies) |
| 24 | + |
| 25 | +### Installing the module |
| 26 | + |
| 27 | +To install the Diagnostics PowerShell Module, you can use the following command in PowerShell: |
| 28 | + |
| 29 | +```powershell |
| 30 | +Install-Module -Name Microsoft.PowerPlatform.EnterprisePolicies |
| 31 | +``` |
| 32 | + |
| 33 | +### Running the functions included in the module |
| 34 | + |
| 35 | +Once the module is installed, you can import it into your PowerShell session using the following command: |
| 36 | + |
| 37 | +```powershell |
| 38 | +Import-Module Microsoft.PowerPlatform.EnterprisePolicies |
| 39 | +``` |
| 40 | + |
| 41 | +The module includes several functions that can be used to diagnose and troubleshoot issues related to Virtual Network configurations. Some of the key functions include: |
| 42 | + |
| 43 | +- [Get-EnvironmentRegion](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Get-EnvironmentRegion.md): Retrieves the region of the specified Power Platform environment. |
| 44 | +- [Get-EnvironmentUsage](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Get-EnvironmentUsage.md): Provides information about the usage of the specified Power Platform environment. |
| 45 | +- [Test-DnsResolution](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-DnsResolution.md): Tests the DNS resolution for the specified domain name. |
| 46 | +- [Test-NetworkConnectivity](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-NetworkConnectivity.md): Tests the network connectivity between the Power Platform environment and the specified Virtual Network. |
| 47 | + |
| 48 | +### Report issues with the diagnostic module |
| 49 | + |
| 50 | +If you encounter issues while running the diagnostic module, report them through the GitHub repository where the module is hosted. The repository is available at: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies). |
| 51 | + |
| 52 | +To report an issue, go to the Issues section of the repository and create a [new issue](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/issues/new). Provide detailed information about the problem you're facing, including any error messages or logs that might help in diagnosing the issue. The more information you provide, the easier it is for us to assist you. Don't include any sensitive information in your report. |
| 53 | + |
| 54 | +## How to troubleshoot common scenarios |
| 55 | + |
| 56 | +### Misconfiguration of regions |
| 57 | + |
| 58 | +If you have verified that everything is correctly configured but you're still experiencing issues, you can use the `Get-EnvironmentRegion` function from the Diagnostics PowerShell Module to check if the region of your Power Platform environment is the same as the regions where you have been configuring your Virtual Network. You can run the following command: |
| 59 | + |
| 60 | +```powershell |
| 61 | +Get-EnvironmentRegion -EnvironmentId "00000000-0000-0000-0000-000000000000" |
| 62 | +``` |
| 63 | + |
| 64 | +Your environment belongs to a specific PowerPlatform region. However, a PowerPlatform region can span multiple Azure regions. You need to ensure that your Virtual Network is configured in both of the Azure regions that correspond to your PowerPlatform region. Your environment can be located in either of the two Azure regions, and it can also automatically fail over between them. Therefore, to ensure high availability and connectivity, you should configure your Virtual Network in both Azure regions associated with your PowerPlatform region. You can find the mapping of the PowerPlatform regions to Azure regions that are support for the Virtual Network functionality at [Power Platform regions](/power-platform/admin/vnet-support-overview#supported-regions). |
| 65 | + |
| 66 | +### Hostname not found |
| 67 | + |
| 68 | +If you're experiencing issues with hostname resolution, you can use the `Test-DnsResolution` function from the Diagnostics PowerShell Module to check if the hostname is being resolved correctly. You can run the following command: |
| 69 | + |
| 70 | +```powershell |
| 71 | +Test-DnsResolution -EnvironmentId "00000000-0000-0000-0000-000000000000" -HostName "microsoft.com" |
| 72 | +``` |
| 73 | + |
| 74 | +This command tests the DNS resolution for the specified hostname in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to resolve the hostname using the DNS server that is configured for your Virtual Network. If the hostname isn't being resolved correctly, you might need to check your DNS settings and ensure that the hostname is correctly configured. |
| 75 | + |
| 76 | +> [!IMPORTANT] |
| 77 | +> If you notice that your DNS setup is incorrect and need to update the DNS server settings for your Virtual Network, see [Can I update the DNS address of my Virtual Network after it's delegated to "Microsoft.PowerPlatform/enterprisePolicies"?](/power-platform/admin/vnet-support-overview#can-i-update-the-dns-address-of-my-virtual-network-after-its-delegated-to-microsoftpowerplatformenterprisepolicies) |
| 78 | +
|
| 79 | +### Unable to connect to the resource |
| 80 | + |
| 81 | +If you're experiencing issues with connectivity to a resource, you can use the `Test-NetworkConnectivity` function from the Diagnostics PowerShell Module to check if there's connectivity. You can run the following command: |
| 82 | + |
| 83 | +```powershell |
| 84 | +Test-NetworkConnectivity -EnvironmentId "00000000-0000-0000-0000-000000000000" -Destination "unknowndb.database.windows.net" -Port 1433 |
| 85 | +``` |
| 86 | + |
| 87 | +This command attempts to establish a TCP connection to the specified destination and port in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to connect to the specified destination using the network configuration that is set up for your Virtual Network. If the connection fails, you might need to check your network settings and ensure that the destination is reachable from your Virtual Network. If the connection is successful, it indicates that there's network connectivity between the Power Platform environment and the specified resource. |
| 88 | + |
| 89 | +> [!NOTE] |
| 90 | +> This command only tests if a TCP connection can be established to the specified destination and port. It doesn't test if the resource is actually available or if there are any application-level issues that might be preventing access to the resource. |
| 91 | +> Furthermore, some firewalls might be allowing TCP connections to be established but blocking actual traffic to the resource (that is, HTTPS). Therefore, even if the command indicates that there's network connectivity, it doesn't guarantee that the resource is fully accessible. |
| 92 | +
|
| 93 | +### Connectivity is successful, but the application is still not working |
| 94 | + |
| 95 | +If the connectivity tests are successful, but you're still experiencing issues with your application, you might need to check the application-level settings and configurations. Things that you can check include: |
| 96 | + |
| 97 | +- Validate in your firewall that the delegated subnet is allowed to access the resource. |
| 98 | +- Validate that the certificate presented by the resource is publicly trusted. |
| 99 | +- Ensure that there are no authentication or authorization issues that might be preventing access to the resource. |
| 100 | + |
| 101 | +If our existing tools aren't sufficient to diagnose the issue further. You might want to create a subnet without delegation in your Virtual Network and deploy a virtual machine in that subnet. You can then use the virtual machine to perform additional diagnostics and troubleshooting steps, such as checking network traffic, analyzing logs, and testing application-level connectivity. |
0 commit comments