Context: We have D365F&O cloud hosted tier 1 environments. Weirdly, I see an issue where the Azure VMs for these tier 1 apps are accessible only from home but not from office or corporate network.
App web URLs/clients work fine but just unable to connect to Azure virtual machines from corporate network.
Had a discussion with security team where they're asking if there's a reason as to why this is published to the public internet, and not our corporate internal Azure WSI networks, where we have internal routing available.
Unfortunately, I wasn't able to find how this can be changed in Azure and as per below learn page from Microsoft it looks like we need the public IP
Does anyone have an idea of how this can be changed in Azure (if it can be changed). If not, please help me understand who so that I can please security folks in similar way, thanks!