Merge pull request #286608 from sipastak/avd-fqdn-update

Update FQDNs

Author: prmerger-automator[bot]

articles/virtual-desktop/required-fqdn-endpoint.md

@@ -39,6 +39,7 @@ The following table is the list of FQDNs and endpoints your session host VMs nee
 | `oneocsp.microsoft.com` | TCP | 80 | Certificates | N/A |
 | `www.microsoft.com` | TCP | 80 | Certificates | N/A |
 
+
 The following table lists optional FQDNs and endpoints that your session host virtual machines might also need to access for other services:
 
 | Address | Protocol | Outbound port | Purpose | Service tag |
@@ -120,6 +121,9 @@ Select the relevant tab based on which cloud you're using.
 | `learn.microsoft.com` | TCP | 443 | Documentation | All |
 | `privacy.microsoft.com` | TCP | 443 | Privacy statement | All |
 | `query.prod.cms.rt.microsoft.com` | TCP | 443 | Download an MSI to update the client. Required for automatic updates. | [Windows Desktop](users/connect-windows.md) |
+| `graph.microsoft.com` | TCP | 443 | Service traffic | All |
+| `windows.cloud.microsoft.com` | TCP | 443 | Connection center | All |
+| `windows365.microsoft.com` | TCP | 443 | Service traffic | All |
 
 # [Azure for US Government](#tab/azure-for-us-government)
 
@@ -133,11 +137,16 @@ Select the relevant tab based on which cloud you're using.
 | `learn.microsoft.com` | TCP | 443 | Documentation | All |
 | `privacy.microsoft.com` | TCP | 443 | Privacy statement | All |
 | `query.prod.cms.rt.microsoft.com` | TCP | 443 | Download an MSI to update the client. Required for automatic updates. | [Windows Desktop](users/connect-windows.md) |
+| `graph.microsoft.com` | TCP | 443 | Service traffic | All |
+| `windows.cloud.microsoft.com` | TCP | 443 | Connection center | All |
+| `windows365.microsoft.com` | TCP | 443 | Service traffic | All |
 
 ---
 
 These FQDNs and endpoints only correspond to client sites and resources. This list doesn't include FQDNs and endpoints for other services such as Microsoft Entra ID or Office 365. Microsoft Entra FQDNs and endpoints can be found under ID *56*, *59* and *125* in [Office 365 URLs and IP address ranges](/office365/enterprise/urls-and-ip-address-ranges#microsoft-365-common-and-office-online).
 
+If you're on a closed network with restricted internet access, you may also need to allow the FQDNs listed here for certificate checks: [Azure Certificate Authority details | Microsoft Learn](../security/fundamentals/azure-CA-details.md#certificate-downloads-and-revocation-lists).
+
 ## Next steps
 
 - [Check access to required FQDNs and endpoints for Azure Virtual Desktop](check-access-validate-required-fqdn-endpoint.md).