Cannot access captive portal on azure hosted controller

Hello to all,

I have UniFI Controller hosted on VM on Azure. Everything works perfect except guests cannot access guest portal (captive) so they cannot be provisioned. Inbound security rules are all set but no success. I am pretty sure the problem is in network rules and access to ip addresses. Am I missing something?

Name Source Destination Service

22 192.168.0.16 10.10.0.4 SSH (TCP/22)

8443 Any 10.10.0.4 Custom (TCP/8443)

8080 Any 10.10.0.4 Custom (TCP/8080)

8088 192.168.0.16 10.10.0.4 Custom (TCP/8088)

8843 192.168.0.16 10.10.0.4 Custom (TCP/8843)

3478 192.168.0.16 10.10.0.4 Custom (UDP/3478)

when I enter http://controllerIP:8880/guest/s it opens captive and after acceptance of terms it creates redirection just fine. But I have to enter this address manualy

Any ideas?

Thank you.