research-hub/azure-firewall-rules/WindowsClient.jsonc

[
  {
    "name": "WindowsClient_App",
    "priority": 2000,
    "ruleCollectionType": "FirewallPolicyFilterRuleCollection",
    "action": {
      "type": "Allow"
    },
    "rules": []
  },
  {
    "name": "WindowsClient_NW",
    "priority": 1000,
    "ruleCollectionType": "FirewallPolicyFilterRuleCollection",
    "action": {
      "type": "Allow"
    },
    "rules": [
      {
        "ruleType": "NetworkRule",
        "name": "PublicNTP",
        "ipProtocols": ["UDP"],
        "sourceIpGroups": ["{{ipAddressPool}}"],
        // Can't use this because we'd loose support for Basic tier Firewall
        //"destinationFqdns": ["time.windows.com"],
        "destinationAddresses": ["40.119.6.228"],
        "destinationPorts": ["123"]
      }
    ]
  }
]