Skip to content

Commit 7ab8eda

Browse files
authored
Merge pull request #185949 from miwithro/patch-117
Update limit-egress-traffic.md
2 parents b45dda1 + a9ba360 commit 7ab8eda

File tree

1 file changed

+16
-4
lines changed

1 file changed

+16
-4
lines changed

articles/aks/limit-egress-traffic.md

Lines changed: 16 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -153,6 +153,18 @@ The following FQDN / application rules are required for using Windows Server bas
153153

154154
## AKS addons and integrations
155155

156+
### Microsoft Defender for Containers
157+
158+
#### Required FQDN / application rules
159+
160+
The following FQDN / application rules are required for AKS clusters that have Microsoft Defender for Containers enabled.
161+
162+
| FQDN | Port | Use |
163+
|-----------------------------------------------|-----------|----------|
164+
| **`login.microsoftonline.com`** | **`HTTPS:443`** | Required for Active Directory Authentication. |
165+
| **`*.ods.opinsights.azure.com`** | **`HTTPS:443`** | Required for Microsoft Defender to upload security events to the cloud.|
166+
| **`*.oms.opinsights.azure.com`** | **`HTTPS:443`** | Required to Authenticate with LogAnalytics workspaces.|
167+
156168
### Azure Monitor for containers
157169

158170
There are two options to provide access to Azure Monitor for containers, you may allow the Azure Monitor [ServiceTag](../virtual-network/service-tags-overview.md#available-service-tags) **or** provide access to the required FQDN/Application Rules.
@@ -171,10 +183,10 @@ The following FQDN / application rules are required for AKS clusters that have t
171183

172184
| FQDN | Port | Use |
173185
|-----------------------------------------|-----------|----------|
174-
| dc.services.visualstudio.com | **`HTTPS:443`** | This endpoint is used for metrics and monitoring telemetry using Azure Monitor. |
175-
| *.ods.opinsights.azure.com | **`HTTPS:443`** | This endpoint is used by Azure Monitor for ingesting log analytics data. |
176-
| *.oms.opinsights.azure.com | **`HTTPS:443`** | This endpoint is used by omsagent, which is used to authenticate the log analytics service. |
177-
| *.monitoring.azure.com | **`HTTPS:443`** | This endpoint is used to send metrics data to Azure Monitor. |
186+
| **`dc.services.visualstudio.com`** | **`HTTPS:443`** | This endpoint is used for metrics and monitoring telemetry using Azure Monitor. |
187+
| **`*.ods.opinsights.azure.com`** | **`HTTPS:443`** | This endpoint is used by Azure Monitor for ingesting log analytics data. |
188+
| **`*.oms.opinsights.azure.com`** | **`HTTPS:443`** | This endpoint is used by omsagent, which is used to authenticate the log analytics service. |
189+
| **`*.monitoring.azure.com`** | **`HTTPS:443`** | This endpoint is used to send metrics data to Azure Monitor. |
178190

179191
### Azure Policy
180192

0 commit comments

Comments
 (0)