Forum Discussion

PaulCollinge's avatar
PaulCollinge
Icon for Microsoft rankMicrosoft
Jun 27, 2022

Optimizing RDP Connectivity for Windows 365

Updated with RDP & Zscaler connectivity improvements August 2025 The use of VPN or Secure Web Gateway (SWG) client software or agents to provide tunneled access to on-premises resources in addition...
PaulCollinge_3-1656338336520.png
best practices
PaulCollinge's avatar
PaulCollinge
Icon for Microsoft rankMicrosoft
Feb 17, 2023
Zscaler cannot use wildcard FQDNs in the config above, hence why IPs are used in the example. You should also include the two IPs mentioned in addition as they are both not included in the RDP IP information. I don't expect them to change as they are used pervasively within Azure.
mmmiller60's avatar
mmmiller60
Copper Contributor
Feb 18, 2023

PaulCollingeYes, haha, I found out the hard way wild cards are not supported when I tried to add it!

 

I have engaged with our Zscaler team and added the context that this impacting our entire agency cloud VDI journey.  They informed me they do already have an existing ER (enhancement request), and they added us to it.  Anyone reading this that is a customer, please do call in and get added to the ER.  They also are researching internally with the engineering team to see if there is any other way they could exclude wildcard based traffic from ZIA and I will share here if they come up with anything.

 

Also, since URL exceptions are supported by zscaler, I'm wondering if there is any way we could find out the appropriate itemized non-wildcard URLs, would the AVD URL checker do the trick?

https://learn.microsoft.com/en-us/azure/virtual-desktop/required-url-check-tool

  • Tom163's avatar
    Tom163
    Copper Contributor
    Oct 26, 2023

    mmmiller60 Hi, appreciate you posted quite a few months back now but did you manage to bypass AVD with Zscaler successfully? We are facing the same issues as you. Thanks, Tom