5
I want to write a plugin that utilizes a web service on a server running on an internal server (private company network). Can the plugin connect to an Azure VNET and by extension connect to a computer through an Azure VPN Gateway?
*This post is locked for comments
My original question is similar to asking whether an Azure intermediary can be used. The answer is no.
Even within Azure the PaaS products can't access the site-to-site VPNs. CRM Online is another step removed as are the other SaaS products. This diagram shows it pretty well: docs.microsoft.com/.../architecture-of-microsoft-hybrid-cloud-scenarios
The diagram on that page shows the network layer for SaaS and PaaS has "Internet pipe or ExpressRoute". ExpressRoute requires a peering setup with Microsoft leaving only internet for CRM Online.
There is no network level access to CRM Online that doesn't use public internet addresses.
So, am I to understand that a plugin cannot be made to tunnel directly into a VPN? That an Azure set up is a required intermediary?
thanks,
The firewall port restrictions can be placed to restrict access to only your CRM domain rather than opening it freely for everyone. In addition to that use proper security mechanism to authenticate as well. I guess that's the only option you have.
Hi Kevin,
If it is access from onpremise then it must be access from online too. As Bas mention check firewall setting. If it doesn't work then you need to check docs.microsoft.com/.../web-sites-integrate-with-vnet
Hi Kevin,
I'm not sure what the solution should be here, but one option might be to have a "proxy" service in Azure which would be integrated with your VNET and which would be available to CRM.
PS. Guessing you've read this, but just FYI: docs.microsoft.com/.../web-sites-integrate-with-vnet
Technically that would be no problem. What you need to do in that case is to open a port in your firewall in order to allow communications to the webservice you are exposing. Your plugin rhen needs to communicatie to the external url of your company. No matter what you do, you need to address an url fromwithinyour plugin.
I hope this helps you forward
Bas
My question is about CRM Online, not on-premise.
The webservice is what needs to stay on the private network. The question is really whether a plugin running in CRM Online can connect to an internal service without exposing the internal service to the internet.
Hi Kevin,
this is possible. As long as you use an URL to connect to the webservice then it is possible.
I assume you run CRM on-premise? In that case you can test from the CRM server itself if the webservice is accessible from a console app on the server.
I hope this helps
Bas
p.s. on my blog you find a number of examples of connecting to external services from within CRM ;)
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,280
Super User 2024 Season 2
#2
Martin Dráb
230,235
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (