incorporating feedback

Author: Larry Franks

articles/machine-learning/how-to-prevent-data-loss-exfiltration.md

@@ -92,11 +92,16 @@ Select the configuration that you're using:
 
 # [Service tag/NSG](#tab/servicetag)
 
-__Allow__ outbound traffic over __ANY port 443__ to the following __service tags__. Replace `<region>` with the Azure region that contains your compute cluster or instance:
+__Allow__ outbound traffic to the following __service tags__. Replace `<region>` with the Azure region that contains your compute cluster or instance:
 
-* `BatchNodeManagement.<region>`
-* `AzureMachineLearning`
-* `Storage.<region>` - A Service Endpoint Policy will be applied in a later step to limit outbound traffic. 
+| Service tag | Protocol | Port |
+| ----- | ----- | ----- |
+| `BatchNodeManagement.<region>` | ANY | 443 |
+| `AzureMachineLearning` | TCP | 443 |
+| `Storage.<region>` | TCP | 443 |
+
+> [!NOTE]
+> For the storage outbound, a Service Endpoint Policy will be applied in a later step to limit outbound traffic. 
 
 # [Firewall](#tab/firewall)
 
@@ -106,7 +111,7 @@ __Allow__ outbound traffic over __ANY port 443__ to the following FQDNs. Replace
 * `<region>.service.batch.com`
 
 > [!WARNING]
-> If you enable the service endpoint on the subnet used by your firewall, you must open outbound traffic to the following hosts:
+> If you enable the service endpoint on the subnet used by your firewall, you must open outbound traffic to the following hosts over __TCP port 443__:
 > * `*.blob.core.windows.net`
 > * `*.queue.core.windows.net`
 > * `*.table.core.windows.net`
@@ -138,14 +143,14 @@ When using Azure Machine Learning curated environments, make sure to use the lat
 
     # [Service tag/NSG](#tab/servicetag)
 
-    __Allow__ outbound traffic over __ANY port 443__ to the following service tags. Replace `<region>` with the Azure region that contains your compute cluster or instance.
+    __Allow__ outbound traffic over __TCP port 443__ to the following service tags. Replace `<region>` with the Azure region that contains your compute cluster or instance.
 
     * `MicrosoftContainerRegistry.<region>`
     * `AzureFrontDoor.FirstParty`
 
     # [Firewall](#tab/firewall)
 
-    __Allow__ outbound traffic over __ANY port 443__ to the following FQDNs:
+    __Allow__ outbound traffic over __TCP port 443__ to the following FQDNs:
 
     * `mcr.microsoft.com`
     * `*.data.mcr.microsoft.com`