Azure NetApp Files - No private endpoint support?

Question

Azure NetApp Files - No private endpoint support?

Gavin Wun 25

Hello,

I had a look at the documentation, maybe I'm reading it wrong but seems like it should support private endpoints when using standard network features - https://learn.microsoft.com/en-us/azure/azure-netapp-files/azure-netapp-files-network-topologies

But after creating the netapp volumes, there don't seem to be an option to create private endpoints for the instance?

I have tried to create a private endpoint separately, but looks like there's no option to select Microsoft.NetApp/* there either when it comes to the resource type selection drop-down.

So I wonder when it says private endpoints in the security documentation section - https://learn.microsoft.com/en-us/azure/azure-netapp-files/data-plane-security What sort of private endpoints is Microsoft referring to?

Kind Regards,

Gavin

Gavin Wun 25 Reputation points

2025-12-03T20:56:21.4666667+00:00

Hi Venkatesan,

Thank you for the clarification, much appreciated :)

Cheers,

Gavin

2 answers

Your answer

Gavin Wun 25 Reputation points

2025-12-03T20:56:21.4666667+00:00

Hi Venkatesan,

Thank you for the clarification, much appreciated :)

Cheers,

Gavin

Answer 1

Azure NetApp Files does support private endpoints, but this support is contingent on using Standard network features. According to the documentation, private endpoints allow for secure connections to Azure services via Azure Private Link, ensuring that traffic remains within your virtual network and does not traverse the public internet.

If you are unable to create private endpoints for your Azure NetApp Files instance, it may be due to the configuration of your network features. Ensure that you have selected Standard network features when creating your volumes, as private endpoints are not supported with Basic network features. Additionally, the documentation states that you must select a key vault private endpoint when using customer-managed keys, which indicates that private endpoints are indeed a part of the Azure NetApp Files security model.

If the option to create a private endpoint for Microsoft.NetApp/* is not available in the resource type selection drop-down, it could be a limitation or a specific requirement in your Azure setup that needs to be addressed. You may want to verify your Azure subscription and permissions or consult Azure support for further assistance.

References:

Answer 2

Hi Gavin Wun,

Thanks for Posting question in Microsoft Q&A,

But after creating the netapp volumes, there don't seem to be an option to create private endpoints for the instance? I have tried to create a private endpoint separately, but looks like there's no option to select Microsoft.NetApp/* there either when it comes to the resource type selection drop-down.

Azure NetApp Files does not have its own Private Endpoint resource like Azure Storage, Key Vault, or SQL. So, you will not find any Microsoft.NetApp/ entry when you try to create a private endpoint in the portal. Connectivity to Private Endpoints: Yes" means ANF works with other services' Private Endpoints in the same VNet. NSGs secure them, but ANF uses direct IP access in its delegated subnet.

Secure ANF Instead

VNet peering/VPN/ExpressRoute for access.
NSGs/UDRs on delegated subnet (Standard only).
NFS/SMB permissions + encryption

User's image

Reference:

Kindly let us know if the above helps or you need further assistance on this issue.

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.