Merge pull request #267572 from WilliamDAssafMSFT/20240228-screenshots

20240228 edit pass, update screenshots

Author: AnnaMHuff

articles/synapse-analytics/security/connectivity-settings.md

@@ -1,20 +1,20 @@
 ---
 title: Azure Synapse connectivity settings
-description: An article that teaches you to configure connectivity settings in Azure Synapse Analytics 
-ms.service: synapse-analytics 
-ms.topic: overview
-ms.subservice: security 
-ms.date: 03/29/2022 
-author: danzhang-msft 
-ms.author: danzhang 
+description: Learn to configure connectivity settings in Azure Synapse Analytics.
+author: danzhang-msft
+ms.author: danzhang
 ms.reviewer: wiassaf
+ms.date: 02/28/2024
+ms.service: synapse-analytics
+ms.subservice: security
+ms.topic: conceptual
 ---
 
 # Azure Synapse Analytics connectivity settings
 
-This article will explain connectivity settings in Azure Synapse Analytics and how to configure them where applicable.
+This article explains connectivity settings in Azure Synapse Analytics and how to configure them where applicable.
 
-## Public network access 
+## Public network access
 
 You can use the public network access feature to allow incoming public network connectivity to your Azure Synapse workspace. 
 
@@ -26,47 +26,41 @@ You can use the public network access feature to allow incoming public network c
 > 
 > When the public network access is disabled, access to GIT mode in Synapse Studio and commit changes won't be blocked as long as the user has enough permission to access the integrated Git repo or the corresponding Git branch. However, the publish button won't work because the access to Live mode is blocked by the firewall settings.
 
-Selecting the **Disable** option will not apply any firewall rules that you may configure. Additionally, your firewall rules will appear greyed out in the Network setting in Synapse portal. Your firewall configurations will be reapplied when you enable public network access again. 
+Selecting the **Disable** option will not apply any firewall rules that you might configure. Additionally, your firewall rules will appear grayed out in the Network setting in Synapse portal. Your firewall configurations are reapplied when you enable public network access again. 
 
 > [!TIP]
 > When you revert to enable, allow some time before editing the firewall rules.
 
 ### Configure public network access when you create your workspace
 
-1.    Select the **Networking** tab when you create your workspace in [Azure portal](https://aka.ms/azureportal).
-2.    Under Managed virtual network, select **Enable** to associate your workspace with managed virtual network and permit public network access. 
+1. Select the **Networking** tab when you create your workspace in [Azure portal](https://aka.ms/azureportal).
+1. Under Managed virtual network, select **Enable** to associate your workspace with managed virtual network and permit public network access. 
+1. Under **Public network access**, select **Disable** to deny public access to your workspace. Select **Enable** if you want to allow public access to your workspace.
 
-       :::image type="content" source="./media/connectivity-settings/create-synapse-workspace-managed-virtual-network-1.png" alt-text="Create Synapse workspace, networking tab, Managed virtual network setting" lightbox="media/connectivity-settings/create-synapse-workspace-managed-virtual-network-1.png":::
+   :::image type="content" source="media/connectivity-settings/create-synapse-workspace-public-network-access.png" alt-text="Screenshot from the Azure portal. Create Synapse workspace, networking tab, public network access setting." lightbox="media/connectivity-settings/create-synapse-workspace-public-network-access.png":::
 
-3. Under **Public network access**, select **Disable** to deny public access to your workspace. Select **Enable** if you want to allow public access to your workspace.
-
-   :::image type="content" source="./media/connectivity-settings/create-synapse-workspace-public-network-access-2.png" alt-text="Create Synapse workspace, networking tab, public network access setting" lightbox="media/connectivity-settings/create-synapse-workspace-public-network-access-2.png"::: 
-
-4.    Complete the rest of the workspace creation flow.
+1. Complete the rest of the workspace creation flow.
 
 ### Configure public network access after you create your workspace
 
-1.    Select your Synapse workspace in [Azure portal](https://aka.ms/azureportal).
-2.    Select **Networking** from the left navigation.
-3.    Select **Disabled** to deny public access to your workspace. Select **Enabled** if you want to allow public access to your workspace.
-
-       :::image type="content" source="./media/connectivity-settings/synapse-workspace-networking-public-network-access-3.png" alt-text="In an existing Synapse workspace, networking tab, public network access setting is enabled" lightbox="media/connectivity-settings/synapse-workspace-networking-public-network-access-3.png"::: 
+1. Select your Synapse workspace in [Azure portal](https://aka.ms/azureportal).
+1. Select **Networking** from the left navigation.
+1. Select **Disabled** to deny public access to your workspace. Select **Enabled** if you want to allow public access to your workspace.
 
-4.    When disabled, the **Firewall rules** gray out to indicate that firewall rules are not in effect. Firewall rule configurations will be retained. 
+   :::image type="content" source="media/connectivity-settings/synapse-workspace-networking-public-network-access.png" alt-text="Screenshot from the Azure portal. In an existing Synapse workspace, networking tab, public network access setting is enabled." lightbox="media/connectivity-settings/synapse-workspace-networking-public-network-access.png":::
 
-       :::image type="content" source="./media/connectivity-settings/synapse-workspace-networking-firewall-rules-4.png" alt-text="In an existing Synapse workspace, networking tab, public network access setting is disabled, attention to the firewall rules" lightbox="media/connectivity-settings/synapse-workspace-networking-firewall-rules-4.png"::: 
- 
-5.    Select **Save** to save the change. A notification will confirm that the network setting was successfully saved.
+1. When disabled, the **Firewall rules** gray out to indicate that firewall rules are not in effect. Firewall rule configurations will be retained. 
+1. Select **Save** to save the change. A notification will confirm that the network setting was successfully saved.
 
 ## Connection policy
-The connection policy for Synapse SQL in Azure Synapse Analytics is set to *Default*. You cannot change this in Azure Synapse Analytics. You can learn more about how that affects connections to Synapse SQL in Azure Synapse Analytics [here](/azure/azure-sql/database/connectivity-architecture#connection-policy). 
+The connection policy for Synapse SQL in Azure Synapse Analytics is set to *Default*. You cannot change this in Azure Synapse Analytics. For more information, see [Connectivity architecture](/azure/azure-sql/database/connectivity-architecture#connection-policy).
 
 ## Minimal TLS version
 The serverless SQL endpoint and development endpoint only accept TLS 1.2 and above.
 
-Starting in December 2021, a requirement for TLS 1.2 has been implemented for workspace-managed dedicated SQL pools in new Synapse workspaces. Login attempts from connections using a TLS version lower than 1.2 will fail. Customers can raise or lower the minimal TLS version using the API, for both new Synapse workspaces or existing workspaces, so users who need to use a lower client version in the workspaces can connect. Customers can also raise the minimum TLS version to meet their security needs. Learn more by reading [minimal TLS REST API](/rest/api/synapse/sqlserver/workspace-managed-sql-server-dedicated-sql-minimal-tls-settings/update).
+Since December 2021, a minimum level of TLS 1.2 is required for workspace-managed dedicated SQL pools in new Synapse workspaces. Sign-in attempts from connections using a TLS version lower than 1.2 fail. Customers can raise or lower this requirement using the [minimal TLS REST API](/rest/api/synapse/sqlserver/workspace-managed-sql-server-dedicated-sql-minimal-tls-settings/update) for both new Synapse workspaces or existing workspaces, so users who cannot use a higher TLS client version in the workspaces can connect. Customers can also raise the minimum TLS version to meet their security needs. 
 
+## Related content
 
-## Next steps
+ - [Azure Synapse Analytics IP firewall rules](synapse-workspace-ip-firewall.md)
 
- - Create an [Azure Synapse Workspace](./synapse-workspace-ip-firewall.md).