Requesting a Firewall white-list for Delivery Controller with connecting to Azure Subscription as a hosting connection.
IPs/Url that are needed for DDCs so they can communicate with Azure hosting, including the MCS process, or perform power actions.
Please find the list of the URLs that are used by Citrix, and allow the following addresses on the firewall rule:
https://login.microsoftonline.com
https://management.azure.com
. This is a request URL for Azure Resource Manager provider APIs. The endpoint for management depends on the environment. For example, for Azure Global, it is https://management.azure.com
, and for Azure US Government, it is https://management.usgovcloudapi.net
.https://*.core.windows.net
. This (*) is a wildcard character for storage suffix. For example, https://demo.table.core.windows.net
.https://*.storage.azure.net
. This (*) is a wildcard character for blob storage import and export operations. For example, https://md-impexp-xxxxx.z[00-50].blob.storage.azure.net
.https://*.vault.azure.net
. This (*) is a wildcard character for the key vault name. For example, https://<your-key-vault-name>.vault.azure.net
.https://*.servicebus.windows.net
. This (*) is a wildcard character for namespaces created in the global Azure cloud. For example, https://{serviceNamespace}.servicebus.windows.net/{path}
.Technical Reference : https://docs.citrix.com/en-us/citrix-daas/install-configure/connections/connection-azure-resource-manager#create-a-connection-using-an-existing-service-principal
Other detailed Azure Portal URL info, please refer to: https://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud