Network Requirements
Network and firewall configuration required for Azure SRE Agent connectivity.
Required domains
Add the following domains to your firewall allowlist for both HTTP and WebSocket traffic:
| Domain | Purpose |
|---|---|
*.azuresre.ai | Agent portal, API, and real-time chat (WebSocket) |
sre.azure.com | Agent management portal |
portal.azure.com | Azure Portal (for Monitor → Logs and managed identity) |
api.applicationinsights.io | Application Insights query API |
Zscaler and corporate proxies
Zscaler and some corporate proxies block *.azuresre.ai by default. If the portal doesn't load or the chat interface is unresponsive:
- Add
*.azuresre.aito your firewall allowlist - Ensure WebSocket connections are not blocked by your proxy
- Try the portal in an incognito/private browser window to rule out extension conflicts
Authentication requirements
| Requirement | Details |
|---|---|
| Azure account | Active Azure subscription |
| RBAC permissions | Microsoft.Authorization/roleAssignments/write — requires Role Based Access Control Administrator or User Access Administrator |
| Browser | Modern browser with JavaScript enabled |
Resources created during agent provisioning
When you create an agent, the following resources are automatically provisioned in your resource group:
| Resource | Purpose |
|---|---|
| Application Insights | Agent telemetry and action logging |
| Log Analytics workspace | Backing store for Application Insights |
| Managed Identity | Agent authentication for Azure resource access |
Region availability
See Supported Regions for the list of Azure regions where SRE Agent is available.
Related
| Resource | Description |
|---|---|
| Supported regions → | Azure regions where SRE Agent is available |
| Data privacy → | How SRE Agent handles your data |