Azure Arc access behined network firewall

Question

I have edge server(Ubuntu-22.04LTS) deployed on-premises with azure arc agent behind the network firewall. What are urls need to be allowned in network firewall to get the access of edge server

Answer 1

Azure Resource Manager: https://management.azure.com

Azure Active Directory: https://login.microsoftonline.com, https://<region>.login.microsoft.com, https://login.windows.net

Azure Arc Infrastructure: https://gbl.his.arc.azure.com, https://*.his.arc.azure.com

Microsoft Container Registry: https://mcr.microsoft.com, https://*.data.mcr.microsoft.com

Guest Notification Service: https://guestnotificationservice.azure.com, https://*.guestnotificationservice.azure.com

Service Bus: https://*.servicebus.windows.net (ensure websockets are enabled for outbound access)

Microsoft Graph: https://graph.microsoft.com

Azure Arc Management: https://*.arc.azure.net, https://<region>.obo.arc.azure.com:8084/

Helm Client: https://k8connecthelm.azureedge.net, https://k8sconnectcsp.azureedge.net

Linux Geneva Monitoring: https://linuxgeneva-microsoft.azurecr.io

https://learn.microsoft.com/en-us/azure/azure-arc/servers/network-requirements?tabs=azure-cloud

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **