[Issue] Enabling outbound TCP port 1433 for the sandbox egress policy, specifically for the allowed host *.database.windows.net

Nobody has claimed this yet.

Issue Description
Port 1433 is still blocked from the sandbox. Port 443 works fine. The core issue remains: the SRE Agent sandbox only allows outbound traffic on ports 80 and 443.

The port restriction is built into the SRE Agent platform (Microsoft.App/agents). The sandbox egress policy lists *.database.windows.net as an allowed host, but only routes traffic on ports 80/443.

Thread ID
Paste the thread ID from the SRE Agent portal. (e.g., 50f7521d-dfee-487e-9188-5abdc8adde91)

Steps to Reproduce
1. Describe the action you took 2. Mention the resource or service involved

Expected Behavior
The MCP data connector sql-connection-esprit-db requires outbound TCP 1433 to reach the SQL MI via Private Endpoint at 10.0.2.4

Actual Behavior
What actually happened?

Start by reviewing the SRE Agent sandbox egress policy and the Microsoft.App/agents platform restriction described in the issue. Verify whether the allowed host *.database.windows.net can support outbound TCP 1433 to the SQL MI private endpoint at 10.0.2.4; done means the sql-connection-esprit-db connector can establish that connection.

Written by the indexing model from the issue text.