[Issue] Enabling outbound TCP port 1433 for the sandbox egress policy, specifically for the allowed host *.database.windows.net

[shri8891]

Issue Description
Port 1433 is still blocked from the sandbox. Port 443 works fine. The core issue remains: the SRE Agent sandbox only allows outbound traffic on ports 80 and 443.

The port restriction is built into the SRE Agent platform (Microsoft.App/agents). The sandbox egress policy lists *.database.windows.net as an allowed host, but only routes traffic on ports 80/443.

Thread ID
Paste the thread ID from the SRE Agent portal. (e.g., 50f7521d-dfee-487e-9188-5abdc8adde91)

Steps to Reproduce

1. Describe the action you took 2. Mention the resource or service involved

Expected Behavior
The MCP data connector sql-connection-esprit-db requires outbound TCP 1433 to reach the SQL MI via Private Endpoint at 10.0.2.4

Actual Behavior
What actually happened?