Private network connector firewall requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit a407d7f · +3 −2 lines · also on GitHub
⋯ 236 unchanged lines
237237
238238
### Maintenance steps
239239
1. Create a maintenance connector group
240
− - In the Microsoft Entra admin center, create a new connector group that is not assigned to any Private Access application.
240
+ - In the Microsoft Entra admin center, create a new connector group that is **only** to Private Access test application.
241241
- This group acts as a “parking spot” for maintenance.
242242
1. Move the connector into the maintenance connector group
243
− - When you are ready to service a connector server, edit its assignment and move it into the maintenance connector group with a test private access app where there is no active traffic. Requests can be sent to validate end to end connectivity post-patching before moving back to production connector group.
243
+ - When you are ready to service a connector server, edit its assignment and move it into the maintenance connector group with a test Private Access app where there is no active traffic.
244244
- Once moved to a maintenance connector group the connector no longer receives new user connections and any existing connections continue until they gracefully finish.
245245
246246
1. Drain existing sessions
⋯ 2 unchanged lines
249249
1. Perform maintenance
250250
- Apply patches, reboots, or other updates required on the server.
251251
- Ensure that the Microsoft Entra Private Network Connector services restart and are healthy before reintroducing the connector into production.
252
+ - Post-patching, requests can be sent to the test application to validate end to end connectivity.
252253
253254
1. Return the connector to its original group
254255
- Once maintenance is complete and services are running, move the connector back into its original connector group.
⋯ 9 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:51 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.