# Pair each Elastic SAN IQN with its target portal before configuring Windows connections

> DSE recommends a connection worksheet with one row for each volume, its IQN, target portal, and requested session count.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-073-pair-each-elastic-san-iqn-with-its-target-portal-before-configuring-windows/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:33:47+00:00
- Modified: 2026-09-17T16:38:45+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: IT
- Reading time: 1 minutes

## What you need to know

DSE recommends a connection worksheet with one row for each volume, its IQN, target portal, and requested session count.

## Potentially affected

Use this review when connecting a Windows VM to Azure Elastic SAN through the VM extension, especially when the request includes more than one volume.

## DSE recommendation

DSE recommends a connection worksheet with one row for each volume, its IQN, target portal, and requested session count.

## Article

## Source facts

Microsoft says the Elastic SAN extension connects volumes using the supplied IQNs, portal addresses, and session counts, with a one-to-one volume-to-portal mapping. The extension acts on the provided parameters and does not infer or retain a history of previous connections. Reconfiguration does not automatically change existing connections unless a disconnect is explicitly requested. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/elastic-san/elastic-san-connect-windows)

## Applicability

Use this review when connecting a Windows VM to Azure Elastic SAN through the VM extension, especially when the request includes more than one volume.

## DSE recommendation

DSE recommends a connection worksheet with one row for each volume, its IQN, target portal, and requested session count. Review the ordering of values before submitting a multi-volume configuration. Keep the current connection inventory beside the new request so an intended addition is not confused with an explicit disconnect. Require the workload owner to approve any removal and specify how the affected data will be checked afterward.

## Verification

Inspect the extension result and the Windows connection inventory after the operation. Match each observed volume and portal to the worksheet and compare session counts with the request. Investigate unexpected existing connections separately rather than assuming reconfiguration removed them. Retain any failure message with the exact submitted mapping.

## Official references

- [Microsoft: Connect to an Azure Elastic SAN volume – Windows | Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/elastic-san/elastic-san-connect-windows)

## Primary reference

- Name: Connect to an Azure Elastic SAN volume - Windows | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/storage/elastic-san/elastic-san-connect-windows
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Pair each Elastic SAN IQN with its target portal before configuring Windows connections,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-073-pair-each-elastic-san-iqn-with-its-target-portal-before-configuring-windows/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.