Azure Virtual Desktop can be running while the services around it struggle.
A blocked endpoint, an inspected connection or an endpoint protection rule can prevent host registration, slow profile loading, interrupt application deployment or force remote sessions to fall back to TCP.
The AVD Allowlist Field Guide brings these dependencies together, helping you understand what needs access, when an exception is appropriate and how to validate the result.
The guide covers:
- AVD networking and Azure platform services: required endpoints, authentication, agent updates and platform communication.
- Endpoint protection: Microsoft Defender and Attack Surface Reduction rules, plus general troubleshooting considerations for CrowdStrike Falcon, SentinelOne, Sophos Intercept X, Cisco Secure Endpoint, Cortex XDR and Trend Micro.
- FSLogix: profile containers, services, drivers, Cloud Cache and storage exclusions for VHD/VHDX files on SMB shares.
- Secure web gateways and application delivery: proxy and SSL inspection considerations, Zscaler and Netskope traffic handling, and WinGet/Microsoft Store connectivity.
- RDP Shortpath and Multipath: direct and relayed UDP connections, STUN/TURN requirements and supported client versions.
- Nerdio Manager: deployment automation, DSC and Custom Script Extension workflows, Unified Application Management and outbound access.
- Windows 365: Cloud PC connectivity across Azure Network Connection and Microsoft Hosted Network deployments.
- VPN and ZTNA: checking whether remote-access clients support shared, multi-session hosts.
- Validation: testing AVD endpoints, checking the active RDP transport and confirming that FSLogix exclusions reach the intended hosts.
This is not a blanket list of security bypasses. It separates required connectivity from workload-specific recommendations and troubleshooting exceptions, with links to the relevant Microsoft and Nerdio documentation.
Read the full AVD Allowlist Field Guide for practical checks to help keep your environment connected, protected and supportable.
Read the full AVD Allowlist Field Guide.
Click Here To Return To Blog