# Azure Virtual Desktop

The Azure virtual machines you create for Azure Virtual Desktop must have access to the following URLs in the Azure commercial cloud:

| Address                                                             | Outbound TCP port | Purpose                                  | Service tag         |
| ------------------------------------------------------------------- | ----------------- | ---------------------------------------- | ------------------- |
| \*.wvd.microsoft.com                                                | 443               | Service traffic                          | AzureVirtualDesktop |
| gcs.prod.monitoring.core.windows.net                                | 443               | Agent traffic                            | AzureCloud          |
| production.diagnostics.monitoring.core.windows.net                  | 443               | Agent traffic                            | AzureCloud          |
| \*xt.blob.core.windows.net                                          | 443               | Agent traffic                            | AzureCloud          |
| \*eh.servicebus.windows.net                                         | 443               | Agent traffic                            | AzureCloud          |
| \*xt.table.core.windows.net                                         | 443               | Agent traffic                            | AzureCloud          |
| \*xt.queue.core.windows.net                                         | 443               | Agent traffic                            | AzureCloud          |
| catalogartifact.azureedge.net                                       | 443               | Azure Marketplace                        | AzureCloud          |
| kms.core.windows.net                                                | 1688              | Windows activation                       | Internet            |
| mrsglobalsteus2prod.blob.core.windows.net                           | 443               | Agent and SXS stack updates              | AzureCloud          |
| wvdportalstorageblob.blob.core.windows.net                          | 443               | Azure portal support                     | AzureCloud          |
| 169.254.169.254                                                     | 80                | Azure Instance Metadata service endpoint | N/A                 |
| 168.63.129.16                                                       | 80                | Host health monitoring                   | N/A                 |
| <https://download.parallels.com/ras/Configuration\\_01-20-2022.zip> | 443               | Joining a host to a host pool            | AzureVirtualDesktop |

The following table lists optional URLs that your Azure virtual machines can have access to:

| Address                                                   | Outbound TCP port | Purpose                                             | Azure Gov                |
| --------------------------------------------------------- | ----------------- | --------------------------------------------------- | ------------------------ |
| \*.microsoftonline.com                                    | 443               | Authentication to Microsoft Online Services         | login.microsoftonline.us |
| \*.events.data.microsoft.com                              | 443               | Telemetry Service                                   | None                     |
| [www.msftconnecttest.com](http://www.msftconnecttest.com) | 443               | Detects if the OS is connected to the internet      | None                     |
| \*.prod.do.dsp.mp.microsoft.com                           | 443               | Windows Update                                      | None                     |
| login.windows.net                                         | 443               | Sign in to Microsoft Online Services, Microsoft 365 | login.microsoftonline.us |
| \*.sfx.ms                                                 | 443               | Updates for OneDrive client software                | oneclient.sfx.ms         |
| \*.digicert.com                                           | 443               | Certificate revocation check                        | None                     |
| \*.azure-dns.com                                          | 443               | Azure DNS resolution                                | None                     |
| \*.azure-dns.net                                          | 443               | Azure DNS resolution                                | None                     |

For up to date information, please also visit the Microsoft website at <https://docs.microsoft.com/en-us/azure/virtual-desktop/safe-url-list#required-url-check-tool>.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/appendix/port-reference/azure-virtual-desktop.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.