research-hub/azure-firewall-rules/AVD.jsonc

/*
 * Azure Firewall Rule Collection for Azure Virtual Desktop
 */
{
  "AzureCloud": [
    {
      "name": "AVD_Deployment_App",
      "priority": 300,
      "ruleCollectionType": "FirewallPolicyFilterRuleCollection",
      "action": {
        "type": "Allow"
      },
      "rules": [
        {
          "ruleType": "ApplicationRule",
          "name": "DSC_artifacts",
          "protocols": [
            {
              "protocolType": "Http",
              "port": 80
            },
            {
              "protocolType": "Https",
              "port": 443
            }
          ],
          "targetFqdns": [
            // Deployment of AVD session hosts uses content from the AVD PG stored in this storage account
            "wvdportalstorageblob.blob.core.windows.net"
          ],
          "terminateTLS": false,
          "sourceIpGroups": ["{{ipAddressPool}}"]
        }
      ]
    }
  ],
  "AzureUSGovernment": [
    {
      "name": "AVD_Deployment_App",
      "priority": 300,
      "ruleCollectionType": "FirewallPolicyFilterRuleCollection",
      "action": {
        "type": "Allow"
      },
      "rules": [
        {
          "ruleType": "ApplicationRule",
          "name": "DSC_artifacts",
          "protocols": [
            {
              "protocolType": "Http",
              "port": 80
            },
            {
              "protocolType": "Https",
              "port": 443
            }
          ],
          "targetFqdns": [
            // Deployment of AVD session hosts uses content from the AVD PG stored in this storage account
            "wvdportalstorageblob.blob.core.usgovcloudapi.net"
          ],
          "terminateTLS": false,
          "sourceIpGroups": ["{{ipAddressPool}}"]
        }
      ]
    }
  ]
}