Skip to content

Commit 2d71407

Browse files
Merge pull request #232936 from GitaraniSharma-MSFT/patch-76
(AzureCXP) MicrosoftDocs/azure-docs#107366
2 parents d54dd34 + ffbac46 commit 2d71407

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/private-link/disable-private-endpoint-network-policy.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,10 @@ By default, network policies are disabled for a subnet in a virtual network. To
1818

1919
Network policies can be enabled either for Network Security Groups only, for User-Defined Routes only, or for both.
2020

21-
If you enable network security policies for User-Defined Routes, the /32 routes that are generated by the private endpoint and propagated to all the subnets in its own VNet and directly peered VNets will be invalidated if you have User-Defined Routing, which is useful if you want all traffic (including traffic addressed to the private endpoint) to go through a firewall, since otherwise the /32 route would bypass any other route.
21+
If you enable network security policies for User-Defined Routes, the /32 routes that are generated by the private endpoint and propagated to all the subnets in its own VNet and directly peered VNets will be invalidated if you have User-Defined Routing, which is useful if you want all traffic (including traffic addressed to the private endpoint) to go through a firewall, since otherwise the /32 route would bypass any other route.
22+
23+
> [!NOTE]
24+
> Unless you configure a UDR, the Private Endpoint Route of /32 will remain active. And for the UDR to work on all private endpoints within the subnet, you need to enable PrivateEndpointNetworkPolicies.
2225
2326
You can use the following to enable or disable the setting:
2427

0 commit comments

Comments
 (0)