{"id":"service-endpoints-not-for-on-premises-traffic","text":"VNet service endpoints cannot be used for on-premises to Azure traffic; on-premises must use public/NAT IPs via IP firewall rules.","truth_value":"IN","source":"entries/2026/03/10/vnet-service-endpoints.md","source_url":"","source_hash":"e9acb2ed1bb8de24","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"service-endpoints-not-for-on-premises-traffic","truth_value":"IN","reason":"premise"}]}}