Categories
Issue with Azure SQL connector in FDI

@FDI_USER @EloiLopes-Oracle @Dayne-Oracle
Hello Team
Could you confirm whether the Azure SQL connector in FDI utilizes TLS encryption behind the scenes?
Additionally, we’ve observed that the Azure SQL connector we’ve been attempting to use in FDI does not provide an option to enable TLS. Can you clarify if there is a configuration setting available to enforce TLS encryption?
Furthermore, guidance on configuring the connection string in Oracle FDI for secure connectivity would be appreciated.
Looking forward to your response.
Answers
-
@Ashish-Oracle @EloiLopes-Oracle @Dayne-Oracle - any thoughts please ?
0 -
@PRATHEEK -Azure SQL requires TLS 1.2 or higher, and FDI connectors enforce this implicitly.
Please ensure that the Azure SQL server-level firewall rules allow access from the IP address used by FDI or the Remote Agent (if applicable).
Additionally, from the Azure SQL side:
- Check whether the connection request from FDI is reaching the server.
- If not, verify if it is being blocked by firewall rules or other network restrictions.
1 -
@Ashish-Oracle @EloiLopes-Oracle @Dayne-Oracle @Sumanth V -Oracle @Benjamin Arnulf-Oracle
Can the Azure IP address needs to be whitelisted in FDI to establish the connection ?
FDI/FDIP/FAW: Azure SQL Connection Failure Due to TCP/IP Connection Error
0 -
@PRATHEEK - Yes, it needs to be whitelisted if not done already.
0 -
Azure SQL TLS is set to 1.2
2. I'm pretty sure I can get the certificate for Azure but I know nothing about where Oracles trust store is, I've asked our admin and he too doesn't know, but he is investigating it.
3. This seems to be talking about using a different connection methodology - i.e. JDBC rather than Azure SQL. There are 5 different JDBC connectors listed in the FDI preview features, should I be trying to use one of these? (Oracle JDBC1-5, they seem to be clones of one another). The instructions also seem to talk about assembling connection strings but from what I've seen so far there is no ability to do this in FDI, we're just limited to what we can type in the connector setup form.2nd approach -Azure SQL TLS is set to 1.2
2. There is no facility to add extra properties to the connection string, I am limited to only entering discrete items into the connection form.
3. I have no idea how I am meant to verify that FDI/Data provider supports TLS 1.2I'm really not a network person so a lot of this stuff is outside my area of expertise
btw- thank you Sumath for your prompt responses, appreciate. Can you please advise what's the process for
Azure IP address needs to be whitelisted in FDI to establish the connection ?
0 -
@PRATHEEK - Create a Service Request with Oracle Support and we will assist in getting it whitelisted. Thanks!
0