Set up the Azure firewall

An external IP address filter allows you to restrict which computers can access Azure resources. Each computer has an external IP address, recognised by resources on the internet.

In the SQL server page, select the "Show firewall settings" hyperlink

Set User permssions:

1. Click "+ Add client IP".  This adds your current workstation IP address as a firewall rule.
2. Set 'Minimum TSL version' as 1.2.
3. Click "Save".
4. Azure configures the firewall and confirms the settings have been applied.
5. Click "OK".

Set Time Keeping and Aryza services

1. Azure Portal

2. Azure SQL Server

3. Networking

4. Under Exceptions click: "Allow Azure services and resources to access this server"

5. 

NOTE:

Although the firewall has been set for the server, the settings should be replicated for the database (see below).

KB article

Adding an External IP to your Azure resources

https://exalt.zendesk.com/hc/en-us/articles/360001472755