Starting with Azure File Sync agent 10.1, Azure File Sync supports private endpoints in all public and Azure US Government cloud regions where Azure File Sync is available. Private endpoints enable you to assign your Storage Sync Service private IP addresses from within the address space of your virtual network. This allows you to:
- Securely connect to your Azure resources from on-premises networks using a VPN or ExpressRoute connection with private-peering.
- Secure your Azure resources by disabling the public endpoints for Azure Files and File Sync.
- Increase security for your Azure virtual networks by blocking exfiltration of data from your network boundaries.
Learn more about configuring Azure File Sync network endpoints.