|
2 | 2 | title: Private endpoints overview
|
3 | 3 | description: Understand the use of private endpoints for Azure Backup and the scenarios where using private endpoints helps maintain the security of your resources.
|
4 | 4 | ms.topic: conceptual
|
5 |
| -ms.date: 04/26/2023 |
| 5 | +ms.date: 05/24/2023 |
6 | 6 | ms.custom: devx-track-azurepowershell
|
7 | 7 | ms.service: backup
|
8 | 8 | author: jyothisuri
|
@@ -51,19 +51,19 @@ In all the scenarios (with or without private endpoints), both the workload exte
|
51 | 51 |
|
52 | 52 | In addition to these connections when the workload extension or MARS agent is installed for recovery services vault *without private endpoints*, connectivity to the following domains is also required:
|
53 | 53 |
|
54 |
| -| Service | Domain names | |
55 |
| -| --- | --- | |
56 |
| -| Azure Backup | `*.backup.windowsazure.com` | |
57 |
| -| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` | |
58 |
| -| Azure Active Directory (Azure AD) | [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). | |
| 54 | +| Service | Domain names | Port | |
| 55 | +| --- | --- | --- | |
| 56 | +| Azure Backup | `*.backup.windowsazure.com` | 443 | |
| 57 | +| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` | 443 | |
| 58 | +| Azure Active Directory (Azure AD) | `*.australiacentral.r.login.microsoft.com` <br><br> [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). | 443 <br><br> As applicable | |
59 | 59 |
|
60 | 60 | When the workload extension or MARS agent is installed for Recovery Services vault with private endpoint, the following endpoints are hit:
|
61 | 61 |
|
62 |
| -| Service | Domain name | |
63 |
| -| --- | --- | |
64 |
| -| Azure Backup | `*.privatelink.<geo>.backup.windowsazure.com` | |
65 |
| -| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` | |
66 |
| -| Azure Active Directory (Azure AD) | [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). | |
| 62 | +| Service | Domain name | Port | |
| 63 | +| --- | --- | --- | |
| 64 | +| Azure Backup | `*.privatelink.<geo>.backup.windowsazure.com` | 443 | |
| 65 | +| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` | 443 | |
| 66 | +| Azure Active Directory (Azure AD) |`*.australiacentral.r.login.microsoft.com` <br><br> [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). | 443 <br><br> As applicable | |
67 | 67 |
|
68 | 68 | >[!Note]
|
69 | 69 | >In the above text, `<geo>` refers to the region code (for example, **eus** for East US and **ne** for North Europe). Refer to the following lists for regions codes:
|
|
0 commit comments