Clustering the BizTalk EntSSO Master Secret Server, SQL and MSDTC services on Azure IaaS

If the SQL Server database engine, Always On availability group listener, HEALTH PROBE, database mirroring endpoint, cluster core IP resource, or any other SQL/Biztalk resource is configured to use a port between 49,152 and 65,536 (the https://learn.microsoft.com/en-us/windows/client-management/troubleshoot-tcpip-port-exhaust#default-dynamic-port-range-for-tcpip), add an exclusion for each port. Doing so prevents other system processes from being dynamically assigned the same port. The following example creates an exclusion for port 59999:

netsh int ipv4 add excludedportrange tcp startport=59999 numberofports=1 store=persistent

It is important to configure the port exclusion when the port isn't in use, otherwise the command fails with a message like "The process can't access the file because it is being used by another process."

To confirm that the exclusions have been configured correctly, use the following command: 

netsh int ipv4 show excludedportrange tcp.