Our security team recently implemented new network security groups in our Azure environment. Now when I attempt to connect to my Azure account using the Add-AzureAccount cmdlet, the browser window that opens (for the login screen) times out. In the Azure PS window, I get the following error:
add-azureaccount : The browser based authentication dialog failed to complete. Reason: The server or proxy was not found.
First, I'd like to confirm whether it's possible that the NSG rules are blocking access. Then, if so, what rules should be implemented to allow access? I've seen on other sites that the following URLs should be whitelisted.
login.microsoftonline.com
login.windows.net
management.azure.com
management.core.windows.net
However, I don't see any way to whitelist URLs in an NSG, only IP addresses. Any insight would be appreciated.