The image from the Hybrid ID setup documentation clearly shows that the Azure Connect server needs to have inbound ports open from Azure. Table 7 indicates (but does not explicitly say) that it should have 80 & 443 inbound ports open.
Is this true? There are other conflicting documents floating around and I wanted to make sure the Connect server is as locked down as possible... and putting it in a DMZ is not ideal.
Hybrid Identity required ports and protocols - Azure | Microsoft Docs
