First 10 Minutes: Access¶

Use this checklist when the dominant symptom is endpoint reachability, DNS mismatch, private endpoint routing confusion, or file share mount failure.

mermaid flowchart TD A[Access failure] --> B{DNS correct?} B -->|No| C[Fix endpoint path and DNS] B -->|Yes| D{Required port reachable?} D -->|No| E[Fix network path] D -->|Yes| F{Firewall or PE approval issue?} F -->|Yes| G[Fix storage access path] F -->|No| H[Open specific access playbook]

Checklist¶

1. Capture the exact endpoint, protocol, timestamp, and client source network.
2. Run nslookup for the target FQDN and confirm whether public or private resolution is expected.
3. Test the required port from the client path: 443 for REST, 445 for SMB, 2049 for NFS.
4. Check storage firewall and public network access state.
5. If private access is expected, verify private endpoint approval, DNS zone name, and VNet link.
6. If the issue is Azure Files specific, confirm protocol prerequisites and OS/client support.

Route to playbooks¶

• Generic endpoint access issue → Cannot Access Storage Account
• Private DNS or private endpoint issue → Private Endpoint and DNS Issues
• SMB/NFS mount issue → File Share Mount Issues
• Public/private route confusion → Public vs Private Access Confusion

See Also¶

• Playbooks: Access
• Decision Tree
• Evidence Map

Sources¶

• Azure Storage firewall rules
• Use private endpoints for Azure Storage
• Troubleshoot Azure Files connectivity and mounting