{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
        "slug": "dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/"
        },
        "title": "Keep Azure File Sync on the documented Microsoft routing option",
        "summary": "DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "managed-it",
            "label": "Managed IT operations",
            "alt": "A controlled technology lifecycle progressing from assessment to approved production.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:32:58+00:00",
        "modified_at": "2026-09-17T16:42:35+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 208,
        "potentially_affected": "This check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.",
        "dse_recommendation": "DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.",
        "primary_source": {
            "name": "Azure File Sync networking considerations | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. <a href=\"https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a></p>\n<h2>Applicability</h2>\n<p>This check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.</p>\n<h2>Verification</h2>\n<p>Inspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.</p>\n<h2>Official references</h2>\n<ul>\n<li><a href=\"https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft: Azure File Sync networking considerations | Microsoft Learn</a></li>\n</ul>",
        "content_text": "Source facts\nMicrosoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. Microsoft Learn\nApplicability\nThis check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.\nDSE recommendation\nDSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.\nVerification\nInspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.\nOfficial references\n\nMicrosoft: Azure File Sync networking considerations | Microsoft Learn",
        "content_markdown": "## Source facts\n\nMicrosoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview)\n\n## Applicability\n\nThis check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.\n\n## DSE recommendation\n\nDSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.\n\n## Verification\n\nInspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.\n\n## Official references\n\n- [Microsoft: Azure File Sync networking considerations | Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview)"
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Keep Azure File Sync on the documented Microsoft routing option",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/",
                "headline": "Keep Azure File Sync on the documented Microsoft routing option",
                "description": "DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.",
                "abstract": "DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.",
                "articleBody": "Source facts\nMicrosoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. Microsoft Learn\nApplicability\nThis check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.\nDSE recommendation\nDSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.\nVerification\nInspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.\nOfficial references\n\nMicrosoft: Azure File Sync networking considerations | Microsoft Learn",
                "datePublished": "2026-09-17T16:32:58+00:00",
                "dateModified": "2026-09-17T16:42:35+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Keep Azure File Sync on the documented Microsoft routing option"
                },
                "articleSection": [
                    "IT"
                ],
                "keywords": [
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 208,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Azure File Sync networking considerations | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview"
                }
            }
        ]
    }
}