This session explains the basics of how connectivity works for SQL Database and how you can use network access controls to securely access SQL Database. Note: At 7:33 during the video, it is said that "Allow Access to Azure services" restricts traffic to resources within the subscription - which is incorrect. Setting Allow access to Azure services button on the Portal (Firewall settings page) to ON shall allow traffic to/from resources ( e.g. Azure VM) or PaaS services( e.g. Web App) hosted inside Azure - within same subscription or from another subscription. Read more at the following links: Connectivity Architecture: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connectivity-architectureImpact of removing Allow Access to Azure Services: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview#impact-of-removing-allow-azure-services-to-access-serverIP Based Firewall: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-firewall-configureVnet Firewall Rules: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview