FQDNs for connectivity

Author: David Curwin

articles/backup/backup-sql-server-database-azure-vms.md

@@ -45,6 +45,16 @@ Establish connectivity by using one of the following options:
 
 This option allows the [IP ranges](https://www.microsoft.com/download/details.aspx?id=41653) in the downloaded file. To access a network security group (NSG), use the Set-AzureNetworkSecurityRule cmdlet. If your safe recipients list only includes region-specific IPs, you'll also need to update the safe recipients list the Azure Active Directory (Azure AD) service tag to enable authentication.
 
+Alternatively, you can also allow access to the following FQDNs for establishing required connectivity:
+
+* `*.<datacentercode>.backup.windowsazure.com`<br>
+(See the data center codes [here](https://download.microsoft.com/download/1/2/6/126a410b-0e06-45ed-b2df-84f353034fa1/AzureRegionCodesList.docx))
+
+* `login.windows.net`
+* `*.blob.core.windows.net`
+* `*.queue.core.windows.net`
+
+
 #### Allow access using NSG tags
 
 If you use NSG to restrict connectivity, then you should use AzureBackup service tag to allows outbound access to Azure Backup. In addition, you should also allow connectivity for authentication and data transfer by using [rules](https://docs.microsoft.com/azure/virtual-network/security-overview#service-tags)  for Azure AD and Azure Storage. This can be done from the Azure portal or via PowerShell.