Network Requirements
Network and firewall configuration required for Azure SRE Agent connectivity.
Required domains
Add the following domains to your firewall allowlist for both HTTP and WebSocket traffic:
| Domain | Purpose |
|---|---|
*.azuresre.ai | Agent data plane: API and real-time chat (WebSocket) |
sre.azure.com | Agent management portal |
portal.azure.com | Azure Portal (for Monitor → Logs and managed identity) |
api.applicationinsights.io | Application Insights query API |
Zscaler and some corporate proxies block *.azuresre.ai by default. If the portal doesn't load or the chat interface is unresponsive:
- Add
*.azuresre.aito your firewall allowlist - Ensure WebSocket connections are not blocked by your proxy
- Try the portal in an incognito/private browser window to rule out extension conflicts
About the .ai domain
The *.azuresre.ai domain is registered and operated by Microsoft for Azure SRE Agent. This domain hosts the service's data plane, which handles agent API requests and real-time chat communication (WebSocket). The management portal at sre.azure.com connects to per-agent endpoints on *.azuresre.ai to load the agent experience.
The .ai top-level domain used by Azure SRE Agent (*.azuresre.ai) is different from ai.azure.com, which hosts Azure AI Foundry. Both are Microsoft-operated domains. Add *.azuresre.ai to your organization's firewall allowlist as a trusted Microsoft domain.
Authentication requirements
| Requirement | Details |
|---|---|
| Azure account | Active Azure subscription |
| RBAC permissions | Microsoft.Authorization/roleAssignments/write — requires Role Based Access Control Administrator or User Access Administrator |
| Browser | Modern browser with JavaScript enabled |
Resources created during agent provisioning
When you create an agent, the following resources are automatically provisioned in your resource group:
| Resource | Purpose |
|---|---|
| Application Insights | Agent telemetry and action logging |
| Log Analytics workspace | Backing store for Application Insights |
| Managed Identity | Agent authentication for Azure resource access |
Region availability
See Supported Regions for the list of Azure regions where SRE Agent is available.
Related
| Resource | Description |
|---|---|
| Supported regions → | Azure regions where SRE Agent is available |
| Data privacy → | How SRE Agent handles your data |