# Keep Azure File Sync on the documented Microsoft routing option

> DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:32:58+00:00
- Modified: 2026-09-17T16:42:35+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: IT
- Reading time: 1 minutes

## What you need to know

DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.

## Potentially affected

This check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.

## DSE recommendation

DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings.

## Article

## Source facts

Microsoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview)

## Applicability

This check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.

## DSE recommendation

DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.

## Verification

Inspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.

## Official references

- [Microsoft: Azure File Sync networking considerations | Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview)

## Primary reference

- Name: Azure File Sync networking considerations | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-networking-overview
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Keep Azure File Sync on the documented Microsoft routing option,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-122-keep-azure-file-sync-on-the-documented-microsoft-routing-option/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.