Keep Azure File Sync on the documented Microsoft routing option

Source facts

Microsoft explicitly states that Azure File Sync supports the default Microsoft routing option and does not support internet routing. The agent transfers file data with FileREST over HTTPS, requiring outbound port 443, rather than using SMB for the server-to-share transfer. Microsoft Learn

Applicability

This check applies to a storage-account networking review involving an Azure File Sync deployment, especially when a routing preference change is being proposed.

DSE recommendation

DSE recommends marking File Sync dependencies in the account inventory before changing network routing settings. Record the current routing preference and the Windows servers that depend on the account. Have the storage and network owners compare the proposed setting with the documented File Sync support boundary. Include the actual synchronization path in the review so an SMB connectivity test is not used as the sole basis for approving the change.

Verification

Inspect the account routing preference and retain its observed value with the change record. After any authorized networking adjustment, check File Sync health and a controlled synchronization operation from an affected server. Compare the results with the pre-change observations and investigate a synchronization failure without assuming that successful direct share access proves the agent’s path is healthy.

Official references

• Microsoft: Azure File Sync networking considerations | Microsoft Learn