Azure Arc Agent Connectivity Options

The agent communicates with Azure Monitor over TCP port 443, and you have three connectivity choices. The simplest option is to let the machine reach the public internet directly. If you need an intermediate hop, you can route traffic through a Log Analytics Gateway. For a more direct and secure path, use a hybrid networking solution such as VPN or ExpressRoute. Whatever you choose, ensure the network path is open and stable.

Installation uses either PowerShell or Azure CLI. Run the deployment script on each server, and then monitor the registration process to verify that the server appears in the Azure Arc portal. Once the agent is installed, assign roles in Azure so that users and services can interact with the machine, and apply Azure Policy to enforce compliance settings across your hybrid fleet. By following these steps, you bring your on‑premises servers into the same management plane as your Azure resources, giving you a unified view and consistent policy enforcement.