Merge pull request #113957 from Minewiskan/firewall

Firewall

Author: PRMerger14

articles/analysis-services/analysis-services-network-faq.md

@@ -4,7 +4,7 @@ description: This article provides answers to some of the more common questions
 author: minewiskan
 ms.service: azure-analysis-services
 ms.topic: conceptual
-ms.date: 04/29/2020
+ms.date: 05/05/2020
 ms.author: owend
 ms.reviewer: minewiskan
 ---
@@ -19,7 +19,11 @@ This article provides answers to common questions about connecting to storage ac
 **Answer** - Azure Analysis Services does not use fixed IP addresses or Service Tags. The range of IP addresses your Analysis Services servers use can be anything in the range of IP addresses for the *Azure region*. Because your server IP addresses are variable and can change over time, your firewall rules need to allow for the entire range of Azure region IP addresses your server is in.
 
 **Question** - My Azure storage account is in a different region from my Analysis Services server. How do I configure storage account firewall settings?   
-**Answer** - If the storage account is in a different region, firewall settings must be configured to allow access from **All networks**. Firewall settings configured for Selected networks with whitelisted IP addresses and Allow trusted Microsoft services exception is not supported.
+**Answer** - If the storage account is in a different region, configure storage account firewall settings to allow access from **Selected networks**. In Firewall **Address range**, specify the IP address range for the region the Analysis Services server is in. To get the IP ranges for Azure regions, see [Azure IP Ranges and Service Tags – Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519). Configuring storage account firewall settings to allow access from All networks is supported, however choosing Selected networks and specifying an IP address range is preferred. 
+
+**Question** - My Azure storage account is in the same region as my Analysis Services server. How can I configure storage account firewall settings?   
+**Answer** – Because your Analysis Services server and storage account are in the same region, communications between them use internal IP address ranges, therefore, configuring a firewall to use Selected networks and specifying an IP address range is not supported. If organization policies require a firewall, it must be configured to allow access from All networks.
+
 
 ## Data source connections