updateTcpNsgRule

Author: cachai2

articles/container-apps/firewall-integration.md

@@ -35,6 +35,7 @@ The following tables describe how to configure a collection of NSG allow rules.
 | TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `80`, `31080` | Allow your Client IPs to access Azure Container Apps when using HTTP. `31080` is the port on which the Container Apps Environment Edge Proxy responds to the HTTP traffic. It is behind the internal load balancer. |
 | TCP | Your client IPs | \* | Your container app's subnet<sup>1</sup> | `443`, `31443` | Allow your Client IPs to access Azure Container Apps when using HTTPS. `31443` is the port on which the Container Apps Environment Edge Proxy responds to the HTTPS traffic. It is behind the internal load balancer. |
 | TCP | AzureLoadBalancer | \* | Your container app's subnet | `30000-32767`<sup>2</sup> | Allow Azure Load Balancer to probe backend pools. | 
+| TCP | AzureLoadBalancer | \* | Your container app's exposed TCP port | `30000-32767`<sup>2</sup> | This only applies for TCP traffic. This is not required for HTTP traffic. | 
 
 # [Consumption only environment](#tab/consumption-only)